[cruelfate]

Learned a couple of things from linked research paper like always mount /tmp and /var/tmp as noexec, and some `dig` fu.

[feld]

noexec can break a lot of things so please be mindful

[cruelfate]

Ya, was wondering about package install scripts.

[kjs3]

You can remount those dirs without noexec when you need to do a legitimate install.