Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: Support customizing /dev/shm to a different path #3749

Open
samrocketman opened this issue Sep 6, 2024 · 1 comment
Open

Comments

@samrocketman
Copy link

Describe the feature

Description

Same as... #3748

Background

I tend to harden my OS by locking down temporary spaces with noexec (/dev/shm, /tmp, and /var/tmp).

Because mediumtx requires exec on /dev/shm to operate I need to loosen my security habits. I would like to enable an alternate tmpfs just for mediumtx in a path other than /dev/shm so that I can lock it down with noexec.

Request

Provide an option on mediumtx binary which allows customizing /dev/shm to a different path.

@samrocketman samrocketman changed the title Support customizing /dev/shm to a different path Feature request: Support customizing /dev/shm to a different path Sep 6, 2024
@samrocketman
Copy link
Author

samrocketman commented Sep 6, 2024

Here's an example /etc/fstab entry you can test with (failing) mediamtx

tmpfs /dev/shm tmpfs defaults,noexec,nodev,nosuid,seclabel,size=64M 0 0

You can mount -o remount /dev/shm without rebooting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant