Re: [cobalt-security] eggdrop and monitoring

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Eddy,

> Better yet, look into mounting /home with the "noexec" option.

I imagine that this can easily backfire. Webmail and Neomail are usually 
installed in /home/ and the same is true for other popular third party 
software. Some of us also relocated files from the [/]-partition to [/home] 
to free up space.

But even on a stock RaQ this would cause CGI related problems as the 
executable bit on scripts would no longer work. Some binaries related to 
Interbase in /home/opt/ would throw a fit as well. 

Aside from that kind of collateral damage it can be a good security measure if 
used with the proper care and caution.

-- 

With best regards,

Michael Stauber