[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Making /tmp noexec



Op 13-11-10 16:49, Simon Brandmair schreef:
> On Fri, 12 Nov 2010 13:40:02 +0100 James Allsopp wrote:
>> I was reading this page about making tmp non-executable
>> (http://pario.no/2007/10/04/making-tmp-non-executable/) but it seems a
>> little out of date as I'm using Squeeze.
>>
>> I changed fstab, and edited by 70debconf to
>>
>> DPkg::Pre-Install-Pkgs {"mount -o remount,exec
>> /tmp";"/usr/sbin/dpkg-preconfigure --apt || true";};
>> DPkg::Post-Invoke{"mount -o remount /tmp";};
> 
> I would test first, if apt even needs /tmp to be executable. I run it 
> with /tmp non-exec and don't have any problems with it.
Some packages do need an executable temp to run temporary scripts.
Usually there's no mayhem, bet errors are spawn. To solve this, follow
the method above or add to /etc/apt/apt.conf
 DPkg::Pre-Invoke{"mount -o remount,exec /tmp"}
 DPkg::Post-Invoke{"mount -o remount /tmp"}
That works flawlessly.

Sjoerd

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: