/tmp should be mounted as a separate filesystem with the noexec,nosuid options set /var/tmp should either be symlinked to /tmp or mounted as a filesystem /dev/shm is not mounted with the noexec,nosuid ...
Is it possible to set a symlink on a mountpoint? I have a mountpoint /vz. When I'm ln -s /var/lib/vz /vz the result is, that I have a directory vz in my mountpoint /vz, thus I have /vz/vz. Is there ...