https://linuxeries.org/tags/tmpfs/ Recent content in Tmpfs on ShieldedBytes Hugo en Sun, 06 Sep 2026 08:48:30 +0200 https://linuxeries.org/post/2026-09-06-denying-write-access-on-tmp-a-quick-fix-to-st/ Sun, 06 Sep 2026 08:48:30 +0200 https://linuxeries.org/post/2026-09-06-denying-write-access-on-tmp-a-quick-fix-to-st/ <h2 id="why-tmp-is-a-problem">Why /tmp is a problem</h2> <p><code>/tmp</code> is the classic “dump‑ground” for most Linux programs.<br> Because it’s world‑writable, a non‑root user can drop a rogue binary, swap out a shared library, or trick a set‑uid helper into loading code from there.<br> In 2025 a handful of local privilege‑elevation bugs (e.g., CVE‑2025‑1234) took advantage of that writable surface to inject payloads into privileged processes.<br> The fix? Make <code>/tmp</code> read‑only for everyone but root.</p>