noexec on /dev/shm

Bill Nottingham notting at redhat.com
Tue Dec 14 18:48:36 UTC 2010


Chris Adams (cmadams at hiwaay.net) said: 
> I've seen this said at least a couple of times.  In what way is it
> "wasteful"?  On most systems, /etc/fstab is going to be less than one
> filesystem block anyway, so there is absolutely zero "waste" going on.
> 
> If "waste" of a few dozen bytes is now an issue, /etc/fstab is hardly
> the place to start.

The waste is the code in anaconda that's required to write this on
every install. Then, if new filesystems are added between releases, you
need to 1) patch anaconda 2) have truly gross %post scripts to edit /etc/fstab,
or 3) you write code that just hardcodes the mount anyway.

And again, listing things like /sys in fstab can just give the
uninitiated the idea that it's something they can change... it's *not*
a configuration setting.

Bill


More information about the devel mailing list