noexec on /dev/shm

Chris Adams cmadams at hiwaay.net
Mon Jan 3 15:54:59 UTC 2011


Once upon a time, Adam Jackson <ajax at redhat.com> said:
> Sadly this turns out not to be the case, at least if I'm reading
> fs/pipe.c correctly.  O_NOATIME will turn off atime updates, but mtime
> and ctime are still modified on every pipe write, and there's no such
> thing as O_NOCMTIME even though the filesystem layer does have the
> concept internally.  Which means device-backed filesystems will see
> write traffic just for using named pipes.
> 
> Heck of lame.  Someone should fix that.

The behavior follows the standard, so it shouldn't just be changed by
default without checking if anybody uses the standard behavior.
-- 
Chris Adams <cmadams at hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.


More information about the devel mailing list