Public bug reported:
Hello,
Hardening guides (Securing Debian, CIS, etc...) advise to mount /dev/tmp
with the noexec option. Initramfs hooks are using the /usr/bin/test
utility to check if a file is executable to manage dependencies (if [!
-x /myfile]; then) and copy new files. Therefore, if /dev/tmp is mounted
with noexec, the test utility return false instead of true which breaks
the logic.
How should we handle this case? Is ubuntu officially supporting
hardening (I think so as Debian is doing it)?
Regards,
Aurryon
** Affects: cryptsetup (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1791241
Title:
If /var/tmp is mounted with noexec the scripts skip the copy of some
files
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1791241/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
