From owner-freebsd-questions@FreeBSD.ORG  Fri Apr  8 12:41:14 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4CC3916A4CE
	for <questions@freebsd.org>; Fri,  8 Apr 2005 12:41:14 +0000 (GMT)
Received: from prosporo.hedron.org (hedron.org [66.11.182.60])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D648843D4C
	for <questions@freebsd.org>; Fri,  8 Apr 2005 12:41:13 +0000 (GMT)
	(envelope-from ean@hedron.org)
Received: from www.hedron.org (localhost.hedron.org [127.0.0.1])
	by prosporo.hedron.org (Postfix) with ESMTP id 643F6C104;
	Fri,  8 Apr 2005 08:41:14 -0400 (EDT)
Received: from 216.220.59.169
        (SquirrelMail authenticated user ean);
        by www.hedron.org with HTTP;
        Fri, 8 Apr 2005 08:41:14 -0400 (EDT)
Message-ID: <1803.216.220.59.169.1112964074.squirrel@216.220.59.169>
In-Reply-To: <20050408080256.497F512B037@eurystheus.local>
References: <20050408080256.497F512B037@eurystheus.local>
Date: Fri, 8 Apr 2005 08:41:14 -0400 (EDT)
From: "Ean Kingston" <ean@hedron.org>
To: Bj&#246@example.com, "rn" <K&#246@example.com>,
	"nig" <bkoenig@cs.tu-berlin.de>
User-Agent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
cc: questions@freebsd.org
Subject: Re: mounting /tmp with noexec
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Apr 2005 12:41:14 -0000


> Hello,
>
> I wonder if it is safe to mount /tmp with noexec flag. I already discoved
> that I have to pay attention to this before installing a world, because
> this task requires to execute binaries in /tmp. Are there any further
> pitfalls which I should take into account or even could keep me from doing
> this?

I haven't seen a reply to your query so let me say that I have mounted
/tmp noexec for years and the only problems I've had were the installworld
problem you mentioned and a few badly written 3rd party installers that
expect to be able to execute from /tmp. I also mount /tmp nosuexec and
async. Sometimes after a system crash I have to rebuild /tmp because of
the async but the systems just don't crash that often.

-- 
Ean Kingston
    E-Mail: ean_AT_hedron_DOT_org
 PGP KeyID: 1024D/CBC5D6BB
       URL: http://www.hedron.org/