Skip to Content.
Sympa Menu

sm-grimoire - [SM-Grimoire]Security hole + fix for /tmp

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: "Eric Sandall" <eric AT sandall.us>
  • To: " Source Mage - Grimoire" <sm-grimoire AT lists.ibiblio.org>
  • Subject: [SM-Grimoire]Security hole + fix for /tmp
  • Date: Mon, 7 Oct 2002 11:37:04 -0700 (PDT)

This article brings up a good point when mounting /tmp.
http://online.securityfocus.com/columnists/109

Here's the important part ;) :
"What could I have done to protect my systems? Not wait five weeks to
install security updates, for one thing. For another, as Sandu Mihai
points out on Bugtraq, simply mounting the /tmp directory with noexec and
nosuid will block this worm and a great many other attacks."

Perhaps we should update our /etc/fstab's to do this? And make it so on
the new ISO (when it's out)?

-One of Four
a.k.a. sandalle

--
Eric Sandall | Source Mage GNU/Linux
Developer
eric AT sandall.us | http://www.sourcemage.org
http://www.sandall.us/~sandalle | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org #196285 | http://www.shock.wsu.edu/






Archive powered by MHonArc 2.6.24.

Top of Page