Separate drive partitions for /tmp /home /var /var/tmp /var/log /var/log/audit with restrictive mount options
chris