Re: question about SSH / IPTABLES

[Rolf Kutz <kutz@netcologne.de>]

* Quoting DEFFONTAINES Vincent (Vincent.DEFFONTAINES@coe.int):

> 2. Mount /home, /tmp and any other place users might have write access on
> with the "noexec" switch, so they can only use binaries installed (and
> allowed to them) on the system.

This does not prevent them from executing
binaries. This has been discussed here before.

- rk 

-- 
"What sort of person," said Salzella patiently, "sits down and writes a
maniacal laugh? And all those exclamation marks, you notice? Five? A
sure sign of someone who wears his underpants on his head. Opera can do
that to a man."