Index: [Article Count Order] [Thread]

Date:  Sat, 9 Sep 2006 22:23:16 -0400
From:  "Darrell D. Mobley" <dmobley (at mark) uhostme.net>
Subject:  [coba-e:06812] Re: /TMP Directory
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <000901c6d480$13e401d0$6400a8c0@YOUR4105E587B6>
In-Reply-To:  <007f01c6d45d$635f8810$1e64a8c0@moe>
X-Mail-Count: 06812

Brian, I have read your Nuonce forum post on this subject at
http://www.nuonce.net/support/viewthread.php?tid=405

It appears you originally thought AWStats and Logrotate would fail, and then
you updated the post to say AWStats does not fail and included a fix for
Logrotate.  In the next post, you state "Package Install fails if you choose
to do this!"

Does this mean all PKG installs will fail in the future?

> -----Original Message-----
> From: Brian N. Smith [mailto:brian (at mark) nuonce.net]
> Sent: Saturday, September 09, 2006 6:15 PM
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:06809] Re: /TMP Directory
> 
> > just want to make sure the /TMP security is enabled where files
> > can't be run
> > there.  While I don't think the DDOS attack was successful in
> > running the
> > script, it was successful in shutting down the serer due to MySQL
> > becoming
> 
> [root@bq1 ~]# mount | grep "/tmp"
> /dev/md2 on /tmp type ext3 (rw,noexec,nosuid)
> 
> If your output looks like mine, your good.  Your looking for
> 
> (rw,noexec,nosuid)
> 
> If it isn't there, you can do this;
> 
> # Remount /tmp to be non-executable!
> /usr/bin/perl -pi -e "if (/\/tmp/) { s/defaults/noexec,nosuid,rw/ }"
> /etc/fstab
> /bin/mount -o remount /tmp
> 
> Thanks!
> Brian