nanook

I can understand the desire for it in Alma, since it’s primarily a replacement for Scientific-Linux, and will be on a lot of cloud services, but anytime you add a requirement for something to basically function, you increase the likelihood that it won’t.

No thanks, adding unnecessary complexity decreases reliability and efficiency. Might make it easier to migrate things to AWS, also a negative.

Temporary files can be created by user programs. On my machines, I made /tmp an in memory file system and also disallow execution or setuid/gid in this directory as much malware tries to abuse it in this manner.

Actually, I have my public facing servers configured to listen to 443 as well. Why? Because many corporate and public space wifi spots like libraries, will block 22, but allow 443 for https, so on my shell servers, I also listen to 443.