OpenVZ Forum


Home » Mailing lists » Users » How do I mount /tmp on VEs with noexec,nosuid options?
Re: How do I mount /tmp on VEs with noexec,nosuid options? [message #23134 is a reply to message #23115] Tue, 13 November 2007 11:20 Go to previous messageGo to previous message
aseques is currently offline  aseques
Messages: 12
Registered: December 2006
Junior Member
2007/11/12, Joan <aseques@gmail.com>:
>
>
>
> 2007/11/12, Kir Kolyshkin <kir@openvz.org>:
> > Joan wrote:
> > > Following http://kb.swsoft.com/article_130_648_en.html
> > > I get " unrecognized option `--bindmount_add'" so I guess that in
> > > openVZ it works different.
> > > There was no message in the list related to this.
> > > Anyone knows if there is a command for that?
> > >
> >
> > Try to search forum.openvz.org. If you will find the working solution,
> > please document it on wiki.openvz.org .
>
> I downloaded the mailing list archives since 2005 and couldn't find a
> solution, now I'm looking in the forums and there's something at least
> interesting:
> http://forum.openvz.org/index.php?t=msg&goto=12999&&srch=noexec#msg_12999
>
> Quote:
>
> white:/# mount -t tmpfs -o noexec,nosuid tmpfs /tmp/
> white:/# cat /proc/mounts
> simfs / simfs rw 0 0
> proc /proc proc rw 0 0
> sysfs /sys sysfs rw 0 0
> devpts /dev/pts devpts rw 0 0
> tmpfs /dev/shm tmpfs rw 0 0
> tmpfs /tmp tmpfs rw,nosuid,noexec 0 0
>
> It seems to do the trick
>
> Next step would be to permanently add it to the fstab
> # UNCONFIGURED FSTAB FOR BASE SYSTEM
> tmpfs      /tmp      tmpfs      noexec,nosuid      0     0
> tmpfs      /var/tmp      tmpfs      noexec,nosuid      0     0
>
> At this moment I can't reboot the veid, tomorrow I'll try and see if data
> in fstab remains in the text file after rebooting.
>

Ok,  I can confirm it works as expected.
I rebooted the VeID a couple of times and the changes in fstab are kept.

Even though, wouldn't be nice if there was a parameter to vzctl --bindmount_add
that could do like in virtuozzo.
I wouldn't be so difficult to create an script to replace the appropiate
fields in the /vz/private/veid/root/fstab and add it as a function in the
vzctl.
I'll gladly do the script if it was interestin.
 
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: reset user_beancounters?
Next Topic: Access to private and public IP in VPS
Goto Forum:
  


Current Time: Thu Oct 09 00:59:06 GMT 2025

Total time taken to generate the page: 0.07693 seconds