• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Securing /TMP as per instructions of KB Parallels

M

Mandi

Guest
Hello,
I was following the instructions of: http://kb.odin.com/en/1410
to secure my /tmp folder in noexec mode.

When I edit /etc/fstab, I see another /tmp mounted
as:
none /tmp tmpfs size=1g 0 0

I add the line as instructed in the Knowledge base (!?)
and now my /etc/fstab looks like:

none /tmp tmpfs size=1g 0 0
/var/filesystems/tmp_fs /tmp ext3 noexec,nosuid,loop 1 1

when I df
I see 2 /tmp partitions.

/dev/sda1 972404 141324 781684 16% /
/dev/sda5 4881504 1948580 2932924 40% /usr
/dev/sda7 65384700 29728460 35656240 46% /var
/dev/sda6 4881504 1358920 3522584 28% /home
none 1048576 596 1047980 1% /tmp
none 1048576 596 1047980 1% /tmp


is the old partition taking precende on the new one?
Shall I remove the line of the old /tmp line from the fstab and then add the new one?

They look silly questions, but I don't want to mess up a 1and1, no support server.
 
I wouldnt worry about it, "Securing /tmp" doesn't really do anything anyway. All it means is that instead of the badguys doing this:

chmod +x /tmp/foo.pl
/tmp/foo.pl

they do this

perl /tmp/foo.pl

They usually do the latter anyway, since it involves fewer commands.
 
move mnt

Hi. Done as described above but my redhat would not boot saying it could not check filesystem /filesystems/tmp_fs only to drop in into the repair console.

I added /filesystems/tmp_fs /tmp ext3 noexec,nosuid,loop 1 0 instead of 1 1 so to disable boot fsck for that fs.

Would that be the correct way to go?
Any other method for moving /tmp from / into another filesystem?
 
Back
Top