[systemd-devel] Any reason why /run and /dev/shm do not have MS_NOEXEC flags set?

[Michael Biebl]

2017-02-01 11:02 GMT+01:00 Hoyer, Marko (ADITG/SW2) <mhoyer at de.adit-jv.com>:
> - Is there any reason why the mount points /run and /dev/shm do not have
> MS_NOEXEC flags set?

/run → https://www.freedesktop.org/wiki/Software/systemd/InitrdInterface/

the initrd can place executables in /run so it can cleanly
disasssemble the / file system

/dev/shm → the mount options have been like this for basically
forever. I assume changing that has the potential to break existing
software


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?