noexec mount-option with selinux?
Paul Howarth
paul at city-fan.org
Wed Jun 7 16:41:15 UTC 2006
On Wed, 2006-06-07 at 18:03 +0200, Marten Lehmann wrote:
> Hello,
>
> > That means a fully working solution looks something like this:
> > $ mount --bind /home/tmp/ /home/tmp/
> > $ mount -o remount,noexec /home/tmp/
> > $ mount --bind /home/tmp/ /tmp/
>
> thanks, it really works. It even works after adding appropriate lines to
> /etc/fstab so this is automatically done at boot time (I was afraid that
> mount woudln't like entries with duplicate mountpoints).
Watch out if/when you come to upgrade this system; FC5's anaconda was
confused by bind mounts in fstab and they needed to be commented out
before doing the upgrade,
Paul.
More information about the fedora-selinux-list
mailing list