<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Noexec on Details...</title>
    <link>https://www.deepreflect.net/tags/noexec/</link>
    <description>Recent content in Noexec on Details...</description>
    <generator>Hugo</generator>
    <language>en-US</language>
    <copyright>Copyright © 2003 - 2026 Leonardo Rizzi</copyright>
    <lastBuildDate>Tue, 30 Jun 2026 03:28:29 +0200</lastBuildDate>
    <atom:link href="https://www.deepreflect.net/tags/noexec/feed.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Securing /dev/shm</title>
      <link>https://www.deepreflect.net/2009/12/02/securing-devshm/</link>
      <pubDate>Wed, 02 Dec 2009 07:28:16 +0000</pubDate>
       <guid isPermaLink="false">http://blog.deepreflect.net/?p=781</guid> 
      <description>&lt;p&gt;Edit your /etc/fstab:&lt;/p&gt;
&lt;p&gt;`&lt;/p&gt;
&lt;h1 id=&#34;vi-etcfstab&#34;&gt;vi /etc/fstab&lt;/h1&gt;
&lt;p&gt;`&lt;/p&gt;
&lt;p&gt;change:&lt;/p&gt;
&lt;p&gt;&lt;code&gt;none /dev/shm tmpfs defaults,rw 0 0&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;to&lt;/p&gt;
&lt;p&gt;&lt;code&gt;none /dev/shm tmpfs defaults,nosuid,noexec,rw 0 0&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;Remount /dev/shm:&lt;/p&gt;
&lt;p&gt;`&lt;/p&gt;
&lt;h1 id=&#34;mount--o-remount-devshm&#34;&gt;mount -o remount /dev/shm&lt;/h1&gt;
&lt;p&gt;`&lt;/p&gt;
&lt;p&gt;You can test it runnig a script on /dev/shm, if you get &amp;ldquo;permission denied&amp;rdquo; it is fine!&lt;/p&gt;</description>
      <content:encoded><![CDATA[<p>Edit your /etc/fstab:</p>
<p>`</p>
<h1 id="vi-etcfstab">vi /etc/fstab</h1>
<p>`</p>
<p>change:</p>
<p><code>none /dev/shm tmpfs defaults,rw 0 0</code></p>
<p>to</p>
<p><code>none /dev/shm tmpfs defaults,nosuid,noexec,rw 0 0</code></p>
<p>Remount /dev/shm:</p>
<p>`</p>
<h1 id="mount--o-remount-devshm">mount -o remount /dev/shm</h1>
<p>`</p>
<p>You can test it runnig a script on /dev/shm, if you get &ldquo;permission denied&rdquo; it is fine!</p>
]]></content:encoded>
    </item>
  </channel>
</rss>
