noexec on /dev/shm

[Paul Wouters]

On Tue, 14 Dec 2010, Tomasz Torcz wrote:

>  Of course administrator can temporary override:
> mount /dev/shm -o remount, nosuid
>
> Or even have it stick after reboot, by droping in /etc/systemd/system/
> following unit definition¹:

No.

You either follow what is in /etc/fstab, or you disallow it from /etc/fstab.

You do not ignore /etc/fstab.

And if for some bad reason you do decided to ignore /etc/fstab, this should
clearly cause log entries, and there should be a clear man page section for
the man page in "man fstab" explaining this.

Yes, documentation is not sexy. No source code is not documentation

Paul (yes, bitter by the horrors of 10 years of iproute2)