about tmp partition security

Hello,

I have been reading about securing your tmp partition.
Like this topic http://www.hostgeekz.com/guides/Security/41/Securing_temp_drives.htm

But what if you already have got a tmp partition, all articles are about creating a new "partition".

What do i have to do? Is it just as simple to edit my fstab line:
/tmp ext3 default 1 2

in to:

/tmp ext3 loop,noexec,nosuid,rw 0 0

Kind regards,

Martijn

I did the following:

/tmp ext3 noexec,nosuid,rw 0 0

And that worked for me.

Here some more info:
http://www.eth0.us/?q=tmp

Thanks for your reply.
The article on eth0 is the same.

Operation not supported

when i try to execute command

dd if=/dev/zero of=tmpmnt bs=1024 count=500000
My Frebsd box says Operation not supported

I'm trying to secure my /tmp and /var/tmp directories

PLS help because i found in my crontabs this command:

/usr/sbin/cron[4464]: (apache) CMD (/var/tmp/irclordz/y2kupdate >/dev/null 2>&1)
and i see that my DA server waz hacked.

I try to run chkrootkit and rootkit hunter

rootkit hunter says everything is OK
but chkrootkit says bindshell INFECTED.

after cleaning and reboot chkrootkit says nothing found

Thank you

See my reply in the other thread in which you posted the same question and please refrain from posting the same post in multiple threads.

Thanks.

Jeff

tmp directory hardening!

Be sure to secure the directories /tmp, var/tmp and /dev/shm. Although this is not currently the panacea as a security measure, since there are XSS exploits that execute code directly from the script. So this today does not help much. But it is always good to take this step.

First of all:
At the end of the operation, remember to the server to apply the changes made to the /etc/fstab configuration file.

You can also use the following commands to see how they have mounted the filesystem on your OS:



If you have more questions about it you can search for harden tmp in Google.

Regards.

Sorry. The correct command would be:


Regards.

Why are you replyingn to 12 year old posts? Please check post dates before upping ancient messages without any benefit.