From f37a43fab076b7f061f8a8ba55b80690904c7b6b Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Thu, 6 Aug 2026 12:41:37 +0200 Subject: Hardened mount options --- etc/fstab | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 etc/fstab (limited to 'etc') diff --git a/etc/fstab b/etc/fstab new file mode 100644 index 0000000..9cdf203 --- /dev/null +++ b/etc/fstab @@ -0,0 +1,7 @@ + +# Restrict shared memory +tmpfs /dev/shm tmpfs defaults,nodev,nosuid,noexec 0 0 + +# Restrict /tmp (keep noexec off to allow dev strict directly run out of /tmp) +tmpfs /tmp tmpfs defaults,nodev,nosuid 0 0 + -- cgit