• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Securing /TMP as per instructions of KB Parallels

M

Mandi

Guest
Hello,
I was following the instructions of: http://kb.odin.com/en/1410
to secure my /tmp folder in noexec mode.

When I edit /etc/fstab, I see another /tmp mounted
as:
none /tmp tmpfs size=1g 0 0

I add the line as instructed in the Knowledge base (!?)
and now my /etc/fstab looks like:

none /tmp tmpfs size=1g 0 0
/var/filesystems/tmp_fs /tmp ext3 noexec,nosuid,loop 1 1

when I df
I see 2 /tmp partitions.

/dev/sda1 972404 141324 781684 16% /
/dev/sda5 4881504 1948580 2932924 40% /usr
/dev/sda7 65384700 29728460 35656240 46% /var
/dev/sda6 4881504 1358920 3522584 28% /home
none 1048576 596 1047980 1% /tmp
none 1048576 596 1047980 1% /tmp


is the old partition taking precende on the new one?
Shall I remove the line of the old /tmp line from the fstab and then add the new one?

They look silly questions, but I don't want to mess up a 1and1, no support server.
 
I wouldnt worry about it, "Securing /tmp" doesn't really do anything anyway. All it means is that instead of the badguys doing this:

chmod +x /tmp/foo.pl
/tmp/foo.pl

they do this

perl /tmp/foo.pl

They usually do the latter anyway, since it involves fewer commands.
 
move mnt

Hi. Done as described above but my redhat would not boot saying it could not check filesystem /filesystems/tmp_fs only to drop in into the repair console.

I added /filesystems/tmp_fs /tmp ext3 noexec,nosuid,loop 1 0 instead of 1 1 so to disable boot fsck for that fs.

Would that be the correct way to go?
Any other method for moving /tmp from / into another filesystem?
 
Back
Top