On Tue, 2007-06-05 at 08:41 +0200, Ralf Corsepius wrote: > > > The > > same goes for mounting /tmp and /var noexec. Why do you think there's > > an option to mount a partition with the noexec parameter? > It's useful for data partitions, but even then mounting read only is > more useful. I think you will find very quickly that mounting either /tmp or /var as read-only is anything but useful. Would you seriously suggest doing this? I am not sure you understand these options.