noexec on /dev/shm

[Lennart Poettering]

On Fri, 21.01.11 15:01, Richard W.M. Jones (rjones at redhat.com) wrote:

> > If /tmp is not supposed to be used for data that is inconvenient to
> > store in memory for whatever reason, and that should be automatically
> > removed when it is not used, what _is_ it supposed to be used for?
> 
> The FHS has some scattered guidance:
> 
> (1) http://www.pathname.com/fhs/pub/fhs-2.3.html#THEROOTFILESYSTEM
> 
> (2) http://www.pathname.com/fhs/pub/fhs-2.3.html#VARTMPTEMPORARYFILESPRESERVEDBETWEE
> 
> (3) http://www.pathname.com/fhs/pub/fhs-2.3.html#TMPTEMPORARYFILES

The FHS is kinda old these days, and it has been a while since it was
last updated. The LSB added some additional rules on top of it:

http://refspecs.linux-foundation.org/LSB_4.0.0/LSB-Core-generic/LSB-Core-generic/execenvfhs.html

As did the XDG base dir spec:

http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html

Especially the latter introduced a few things that might be useful in
this context.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.