NOEXEC, NOSUID, READONLY in Linux

[Gabriel2010]

hello
Planning a secure system, & considering the partitions
that should exist, etc. came across some links
discussing NOEXEC, NOSUID, READONLY attributes in
Linux. i'd like to hear from any real world experience
setting up filesystems with all, or some of those
attributes; advices, look-outs, tips, etc.
System will run Apache, MySQL, Bugzilla...

http://www.linux.org.mt/article/secure#N10033

http://www.linux.org.mt/article/secure#N1011B

thanks!




Glad to be here!

 

[jaymzter]

I've been on systems using NOEXEC as a security measure, and I can say you can bypass that rather easily like so:

/lib/ld-linux.so <command>

and the command will run, regardless of NOEXEC. Of course, YMMV