Linux-Noob Forums

Securing your /tmp directory could save you from an un-updated PHP script, where someone attempts to write an executable program with malicous code too.

 

I AM NOT RESPONSIBLE FOR ANY PROBLEMS THIS MAY CAUSE


 

that being said, lets get to it:

 







 

Create 500MB file for our /tmp partition. If you need more space, make count size larger.

 







 

Make an extended filesystem for our tmpMnt file

 







 

Backup your /tmp dir- I had mysql.sock file that I needed to recreate the symbolic link for. Other programs may use it to store cache files or whatever.

 







 







 

Mount the new /tmp filesystem with noexec

 







 







 

Copy everything back to new /tmp and remove backup

 







 

Now we need to add this to fstab so it mounts automatically on reboots.

 







 

You should see something like this: