Re: Making /tmp noexec

[Simon Brandmair <sbrandmair@gmx.net>]

On Fri, 12 Nov 2010 13:40:02 +0100 James Allsopp wrote:
> I was reading this page about making tmp non-executable
> (http://pario.no/2007/10/04/making-tmp-non-executable/) but it seems a
> little out of date as I'm using Squeeze.
> 
> I changed fstab, and edited by 70debconf to
> 
> DPkg::Pre-Install-Pkgs {"mount -o remount,exec
> /tmp";"/usr/sbin/dpkg-preconfigure --apt || true";};
> DPkg::Post-Invoke{"mount -o remount /tmp";};

I would test first, if apt even needs /tmp to be executable. I run it 
with /tmp non-exec and don't have any problems with it.

Simon