OpenVZ Forum: Support » ploop and secure /tmp

Home » General » Support » ploop and secure /tmp

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

ploop and secure /tmp [message #51387]

Sun, 04 May 2014 15:13

ccto
Messages: 61
Registered: October 2005

Member

Hello Everyone,

In CentOS 6 x64 ploop environment, may you please suggest how to mount the /tmp securely? (i.e. nodev, nosuid, noexec)

Thank you very much for your kind advice.

Regards
George

Report message to a moderator

Re: ploop and secure /tmp [message #51401 is a reply to message #51387]

Wed, 07 May 2014 10:50

Abadon
Messages: 4
Registered: August 2013
Location: Cyber Space

Junior Member

Hi,

I mount my ext4 /vz partition for ploop containers with below options:

tune2fs -o journal_data_writeback /dev/sdXY
Where /dev/sdXY is replaced by the partition that you actually use

Then in /etc/fstab i put

noatime,data=writeback,barrier=0,nobh,errors=remount-ro        0 1

for host /tmp I don't use separate partition.

Report message to a moderator

Re: ploop and secure /tmp [message #51473 is a reply to message #51387]

Sat, 21 June 2014 14:49

devonblzx
Messages: 127
Registered: December 2006

Senior Member

It isn't any different than simfs. Use tmpfs or bind.

http://static.openvz.org/userbars/openvz-user-2.png

ByteOnSite President

Report message to a moderator

Re: ploop and secure /tmp [message #51474 is a reply to message #51387]

Sat, 21 June 2014 14:51

ccto
Messages: 61
Registered: October 2005

Member

Yes, I found we can continue to mount simfs into /vz/root/VEID/tmp

thank you.

Report message to a moderator

Previous Topic:	Speed up ploop conversion
Next Topic:	How to create multiple venet interfaces on HN?

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sat Jul 13 21:45:41 GMT 2024

Total time taken to generate the page: 0.02287 seconds