Date: Tue, 15 Sep 2020 20:27:46 -0500 From: Valeri Galtsev <galtsev@kicp.uchicago.edu> To: Polytropon <freebsd@edvax.de> Cc: Marwan Sultan <dead_line@hotmail.com>, FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: partitioning server with 2 hard drives Message-ID: <85AD0AAF-37AE-42C9-BD62-B65398A3A107@kicp.uchicago.edu> In-Reply-To: <20200916002606.52725f1d.freebsd@edvax.de> References: <MWHPR06MB32479D288A8D10AD73FC6A329A200@MWHPR06MB3247.namprd06.prod.outlook.com> <20200916002606.52725f1d.freebsd@edvax.de>
next in thread | previous in thread | raw e-mail | index | archive | help
> On Sep 15, 2020, at 5:26 PM, Polytropon <freebsd@edvax.de> wrote: >=20 >=20 > For /tmp, as well as any partition where user-controlled files can > be placed, it has been correctly suggested to use specific mount > options such as "noexec" and "nosuid" When I joined this advise I forgot one case that bit me in the past when = I made /tmp =E2=80=9Cnoexec=E2=80=9D. Open Office (by Sun Microsystems). = That beast (java based, BTW) when user starts it was creating executable = for that specific user in /tmp, then started that executable. With all = due respect to Sun and all good they have done/made, that was what = really set me off. I do not know if Libre Office does similar thing = though=E2=80=A6 Valeri > . You can immediately see the > advantage of such per-partition settings. ;-) >=20 >=20 > --=20 > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?85AD0AAF-37AE-42C9-BD62-B65398A3A107>