noexec /tmp is NOT supported under Debian.
So it actually is bad practise to mount /tmp noexec? Does it break other things than apt?
Also, are you aware that it provides very little protection?
Yes, but seeing a server nearly compromised made me very eager to take measures, even ones that are easily circumvented.
- Arnoud Warmerdam
