Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
/tmp should be mounted as a separate filesystem with the noexec,nosuid options set
/var/tmp should either be symlinked to /tmp or mounted as a filesystem
/dev/shm is not mounted with the noexec,nosuid options (currently: none). You should modify the mountpoint in /etc/fstab for /dev/shm with those options and remount

This is an OpenVZ Server and I don't know how to fix those issues.

How do I make /tmp ect... safe on OpenVZ?

This for the guest. can this be done on the host?

share|improve this question

closed as off-topic by slm, jasonwryan, Joseph R., Thomas Nyman, manatwork Oct 17 '13 at 9:45

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question has been posted on multiple sites. Cross-posting is strongly discouraged; see the help center and community FAQ for more information." – slm, jasonwryan, Joseph R., Thomas Nyman, manatwork

On the host node or the guest container? – jordanm Oct 16 '13 at 21:28
Please do not crosspost – Marco Oct 16 '13 at 22:02
guest. can this be done on the host? – Parmeet Nanner Oct 16 '13 at 23:16
Please don't vote to close, the cross-posted question on security.se has been closed. – terdon Oct 17 '13 at 4:26
up vote 0 down vote accepted

You can secure from centos secure tmp how to, then change it according to shared memory (shm) and other shared directories.

Above solution is first solution, but if you don't have any information, you can use second solution: OpenVZ make an instance from each resource but VMWare doesn't create it, you can use VMWare.

This post is very good.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.