Does mounting /home with noexec really add security?

All it does is disable binary execution right? So that means other scripts can still run and execute shell code into services.

Run shared hosting.

Does mounting /tmp, /var/tmp and /var/shm with noexec,nodev and all provide security?

closed as not a real question by Tom O'Connor, John Gardeniers, Brent Pabst, mdpc, HopelessN00b Dec 13 '12 at 18:48

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Stupid close! This is a very important question about the effectiveness of security options. And it is important to know against which threads noexec helps and against which not. The questioner has good reasons to bring noexec on home directories in question. – ceving Feb 4 '15 at 10:07
up vote 0 down vote accepted

it will disable execution in any form. If it will add value to security depends on the network and purpose of this network.

  • 2
    I guess that /bin/bash /home/peter/foo.sh would still work. – Theuni Dec 7 '12 at 16:32
  • 1
    Disable execution in any form? Such PHP or just ./script ? So really, noexec does not offer any protection if /bin/bash works – Tiffany Walker Dec 8 '12 at 6:56

Not the answer you're looking for? Browse other questions tagged or ask your own question.