/tmp & /var/tmp noexec hardening without reboot
Saturday, November 28th, 2009After discovering scripts running in my /tmp folder (in CentOS 5.x) I had to harden the directory.
The faster way to harden your /tmp and /var/tmp without rebooting is the following:
In your /dev directory create an empty 2,5 GB file (best for web hosting servers with many websites).
# cd /dev
# dd if=/dev/zero of=tmppart bs=1024 count=2500000
We will now create an ext3 filesystem for in our tmppart file.
(more…)
