<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0"
 xmlns:blogChannel="http://backend.userland.com/blogChannelModule"
>

<channel>
<title>Parallels knowledgebase (KB)</title>
<link>http://kb.parallels.com/</link>
<description>Parallels knowledgebase (KB)</description>
<language>en</language>
<copyright>Copyright 2008 Parallels</copyright>
<pubDate>Wed, 10 Sep 2008 00:00:00 +0600</pubDate>
<lastBuildDate>Wed, 10 Sep 2008 00:00:00 +0600</lastBuildDate>
<webMaster>rt-team@parallels.com</webMaster>

<item>
<title><![CDATA[How do I mount /tmp on VEs with noexec,nosuid options?]]></title>
<link>http://kb.parallels.com/en/648</link>
<description><![CDATA[<div id="article">
	




	<div id="kb" class="kb">
		<div class="article-container">
			<h2 class="title">How do I mount /tmp on VEs with noexec,nosuid options?</h2>
			<div class="ab-frame"><div class="bl"><div class="br"><div class="tl"><div class="tr"><!-- frame -->
				<div class="articleProperty">
					<div>Article ID: 648&nbsp;</div>
					<div>Last Review: Feb,2 2009</div>
					<tr>
						<td>Author: </td>
						<td>Vitaly Filatov</td>
					</tr>
					<br/>
					<tr>
						<td>Last updated by: </td>
						<td>system</td>
					</tr>
				</div><!-- articleProperty -->
			</div></div></div></div></div><!-- frame -->

			<div class="article-internal-flag"></div>

			<div id="article-content">
				<div class="article-part">
					<h2>Resolution</h2>
					Since <span class="admin_category_name_content" id="admin-category-name-content-13" jquery1233545744281="29">Parallels Virtuozzo Containers</span> (hereafter Virtuozzo) 3.0 SP1 it is very easy to mount /tmp (and /var/tmp if needed) dir on VEs with noexec, nosuid, nodev options using introduced 'bindmout' technology. You can follow the steps below to mount /tmp and /var/tmp directories on all VEs with noexec,nosuid options:<br /><br />1. Update Virtuozzo installation to Virtuozzo 3 SP1 using 'vzup2date' utility.<br /><br />2. If you want to mount /tmp and /var/tmp on all VEs with noexec,nosuid,nodev options then do the following:<br /><br />Insert the following line into the main Virtuozzo configuration file /etc/sysconfig/vz: <br /><div class="commandline"><code>BINDMOUNT=&quot;/tmp,nosuid,noexec,nodev /var/tmp,nosuid,noexec,nodev &quot;</code></div> <br />and restart all VEs.<br /><br />3. If you want to mount /tmp and /var/tmp in this way on some particular VE only, you should insert the line above into the VE configuration file /etc/sysconfig/vz-scripts/VEID.conf manually or do it using 'vzctl' utility: <br /><div class="commandline"><code># vzctl set VEID --bindmount_add /tmp,nosuid,noexec,nodev --bindmount_add /var/tmp,nosuid,noexec,nodev --save</code></div> <br />where VEID is an ID of VE you want to apply changes to. VE must be restarted for the changes to take effect.
				</div>
				<div class="keywords"><strong>Keywords:</strong> noexec,nosuid,nodev,mount,tmp,security</div>
			</div>
		</div><!-- article-container -->


			<br/><br/>

			<div id="SubscriptionLink24Article" class="subscriptionLink2">
<a href="http://kb.parallels.com/subscriptions/index.html?Type=Article&ArticleID=648&ArticleLanguage=en&Product=&Category="><img src="http://kb.parallels.com/images/mail.png" width="15" height="15" alt="Subscription for changes to this article"></a>
<a href="http://kb.parallels.com/subscriptions/index.html?Type=Article&ArticleID=648&ArticleLanguage=en&Product=&Category=">Subscription for changes to this article</a>

<script type="text/javascript">

$(document).ready(function() {
	$('#SubscriptionLink24Article a').each(function(){
		$(this).click(function(event) {
			event.preventDefault();
			MainPageContentHide();
			$('#subscription').html('');
			$.get('/Stuff/Subscription', {
													'Type' : 'Article',
													'ArticleID' : '648',
													'ArticleLanguage' : 'en',
													'Product' : '',
													'Category' : ''
												}, function(data) {
																	$('#subscription').html(data);
																	$('#subscription').show();
																	SUBbuildsubmenus_product();
																});
		});
	});
});

</script>

</div>





	</div><!-- kb -->

</div><!-- article -->


]]></description>
<author>Vitaly Filatov</author>
<guid isPermaLink="false">330 LastUpdated: 2009-02-02 03:38:36</guid>
<pubDate>2008-10-06 09:10:36</pubDate>
</item>
</channel>
</rss>



