On Fri, 31 May 2024 01:37:32 +0200 Christoph Anton Mitterer <[email protected]> wrote: > Oh and one more: > > The underlying /tmp (i.e. when not mounted) is now still > 1777/drwxrwxrwt . > > > It might make sense to change that to e.g. 0755/drwxr-xr-x? > > Of course that would leave a defunct /tmp if the tmpfs is unmounted, > but at the same time prevent accidental writes there. > > So depends on whether it's still intended to have the non-tmpfs /tmp.
That would make it harder to switch between the different setups (by masking/enabling the tmp unit), so I am not going to add that to the suggestions. You can of course do it on your machine if you prefer to lock it down further. -- Kind regards, Luca Boccassi
signature.asc
Description: This is a digitally signed message part
