[TriLUG] Securing /etc/fstab

Daniel T. Chen crimsun at email.unc.edu
Tue Dec 11 17:47:18 EST 2001


Also be aware that noexec can be easily bypassed with:

/lib/ld-linux.so.2 /path/to/executable/on/noexec/mounted/partition

so draconian might need some other means...

---
Dan Chen                 crimsun at email.unc.edu
GPG key: www.cs.unc.edu/~chenda/pubkey.gpg.asc

On Tue, 11 Dec 2001, Jeremy P wrote:

> Also, you don't want "noexec" set for /home; otherwise users won't be able
> to run their own binaries.  Are you really trying to be that draconian?  
> I suppose that depending on your users it might be acceptable (you'd want
> to put YOUR home directory somewhere other than /home in that situation).




More information about the TriLUG mailing list