lately there has been a lot of DOS (Denial of Services) Attacks happening, and one of the main causes of these attacks of because of insecure /tmp directories.

Your /tmp directory is very dangerious, since it allows every single user the ability to write to it, so should you have an upload script on your site that may be exploitable, or even if there is an vulnerability in a program which allows for remote code execution, it will allow the person to upload a file into your /tmp directory or even use remote code execution to take control of something like wget and download something into your /tmp directory (this is usually how DOS trojans and rootkits end up on your server)

But there something you can do to help protect your /tmp directory:
===============================================

Firstly you need to stop all processes that are using your /tmp so you can work with it.


you should see something like this:


stop those processes which are using your /tmp directory,
then copy and paste the following this into your terminal window:


it should return something like this:


If you see that, then you know everything has gone according to plan.

What the above will do, is create a storage medium (so call it) on /tmpdir, and then mount /tmpdir to /tmp, but it will mount it with loop,noexec,nosuid,rw

Still won't stop the rootkits or DOS files from being uploaded or downloaded into ur /tmp directory, but I will sure as hell stop them from being executed.

Hope this helps

kthx
Dave Strydom

You would need to login via something like SSH to the server, and be the root user in order to do this, the tutorial is more aimed at sys-admin's who have root access to their servers.

kthx
Dave

On the shared hosting, I believe those measures are already in place. This is more for those with dedicated servers who would want/need to do the configuration themselves I think...

thanks for the tutorial i made this because somebody was uploading xploits and another kind of scripts to my tmp directory, and when the scripts were executed my server becomes unresponsible, this happens many times and i didn't know how to stop it, but i think this will help a lot, thank you so much