Re: about /dev/shm?
Thomas Howard Uphill <[email protected]> Mon, 17 Apr 2006 11:18:25 -0400
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Organization | Institute for Advanced Study |
| Message-ID | <[email protected]> |
Monty Ree wrote: > Hello, all. > > As you know, /dev/shm is 1777 and attackers used to write his backdoors > at that directory. > So I have saw the partition for some time and I can't see any creation > of the files. > So I changed this permission to 755, and there was no problem. > > 1. What's the role of the /dev/shm? > shm means shared memory? > > 2. Why this directory must be 1777? > Is there any problem when I change the permission to like 755? > You'll lose Posix shared memory is all. Perhaps changing the mount to a noexec,nosuid,nodev mount makes more sense, without breaking anything. Anything using shmget should be ok. --Thomas.