/var/tmp security?

[ccto]

Hello all,

May I know the suggested permission setting for /var/tmp ?

Should it drwxrwxrwt? or symbolic link to /tmp
where /tmp is noexec, and nosuid.

OS: CentOS 4.4

Thank you very much for your suggestion.

Regards,
ccto.

 

[ccto]

and also how about /dev/shm ?
We would like to minimize the risk of some hacking scripts being writted/executed in those partitions.

Of course, it does not impact normal operation (DA/apache/exim/dovecot/mysql)

Thank you very much for your suggestion.

 

[nobaloney]

We generally use symbolic links for anything/tmp to /tmp.

/dev/shm is not realy a file or directory; it's a look into the hardware.

You shouldn't touch it.

Jeff