*** This bug is a security vulnerability ***
Public security bug reported:
The default configuration is insecure because /tmp/ and /var/tmp/ is
world-writable and can have files executed.
Temporary storage directories such as /tmp and /dev/shm potentially provide
storage space for malicious exe-
cutables. Although mount options options cannot prevent interpreted code stored
there from getting executed
by a program in another partition, using certain mount options can be
disruptive to malicious code.
CCE 14412-1, 14940-1, 14927-8
** Affects: debian-installer (Ubuntu)
Importance: Undecided
Status: New
** Visibility changed to: Public
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1040179
Title:
/tmp should be mounted with nodev, nosuid, and noexec
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1040179/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
