[KLUG Members] FHS postmortem

[Mike Williams]

Just following up on a couple of questions from last night's FHS 
presentation.  The url for the current copy of the official FHS document 
is http://www.pathname.com/fhs/.  Also, on the way home one more option 
regarding /srv occurred to me.  To prevent web site files from being 
changed if the web server gets compromised, you could use two 
computers.  One will store the files, probably in /srv/hpptd.  The 
second will actually run apache, and mount the /srv/httpd directory 
read-only.  Machines that are responsible for maintaining the web site 
would mount it read-write, but they will be less vulnerable since 
they're not actively serving anything to the Net.