[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debconf and noexec on /tmp



On Fri, Nov 09, 2001 at 01:49:54PM +0000, Tim Haynes wrote:
> 
> That's why, the more layers I can throw in someone's face, be it
> firewalling, more than just `defaults' in fstab, running libsafe, the better.

sure useful things like nosuid, and nodev.  

noexec is worthless.

as soon as everyone uses noexec all script kiddie scripts will run
everything with ld to bypass it.

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpNY9UXxUeEf.pgp
Description: PGP signature


Reply to: