Re: Re[2]: phpBB vulnerability exploited

2004-12-13 Thread Henrique de Moraes Holschuh
On Mon, 13 Dec 2004, Marek Podmaka wrote: > Yes, I have been doing the same with /tmp, but some debian packages > won't install on noexec /tmp. But there are other directorieso n my > system which are world writable - for example /var/tmp and > /var/lock. If you can make /tmp noexec, you c

Re[2]: phpBB vulnerability exploited

2004-12-13 Thread Marek Podmaka
Hello Fraser, Yes, I have been doing the same with /tmp, but some debian packages won't install on noexec /tmp. But there are other directorieso n my system which are world writable - for example /var/tmp and /var/lock. Can entire /var be mounted noexec? Monday, December 13, 2004, 4:17