/tmp never secure!!?

With a secure /tmp, /var/tmp, /dev/shm (rw,noexec,nosuid,nodev) :

# ls -l /tmp | grep nobody
-rwxrwxrwx 1 nobody nobody 17313 Jul 25 01:15 ct*

# ls -l /dev/shm | grep nobody
-rwxrwxrwx 1 nobody nobody 17313 Jul 25 01:15 ct*

And ofcourse:

#ls -l /var/spool/mail | grep nobody | more
-rwxrwxrwx 1 nobody nobody 17313 Jul 25 01:16 ct*

I'm the only one with shell, wget is chmodded (only root permitted), so how could they put this junk in there?/tmp never secure!!?

Also, what can I do about /var/spool/mail?/tmp never secure!!?

 

 

 

 

Top