Re: about /dev/shm?

Thomas Howard Uphill <[email protected]> Mon, 17 Apr 2006 11:18:25 -0400
Newsgroups gmane.comp.security.linux
Organization Institute for Advanced Study
Message-ID <[email protected]>
Monty Ree wrote:
> Hello, all.
> 
> As you know, /dev/shm is 1777 and attackers used to write his backdoors 
> at that directory.
> So I have saw the partition for some time and I can't see any creation 
> of the files.
> So I changed this permission to 755, and there was no problem.
> 
> 1. What's the role of the /dev/shm?
>   shm means shared memory?
> 
> 2. Why this directory must be 1777?
>   Is there any problem when I change the permission to like 755?
>  

You'll lose Posix shared memory is all.  Perhaps changing the mount to a
noexec,nosuid,nodev mount makes
more sense, without breaking anything.

Anything using shmget should be ok.

--Thomas.