Re: /home as noexec and X
On Wed, Dec 09, 1998 at 08:41:06PM +0100, Matus fantomas Uhlar wrote:
> I just don't want any user to download any executable and use it.
> maybe i'm paranoid about security but this sounds like good idea to me;
Perhaps with an appropriately captive or ignorance audience, otherwise
they will just go somewhere else. This will cause apparently random
effects, as you've already experienced.
Remember to mount /tmp, /var/tmp and if you have tetex installed
/var/spool/tekmf/* the same way, or it also doesn't solve much.
Additionally, with perl available there is very little you can't do.
The user just has to alias all perl scripts.
nosuid is probably a better mount option.
Reply to: