Separate /tmp With Noexec, Nodev and Nosuid Mount Options

Applies To:

Oracle Cloud Infrastructure - Version N/A and later

Linux x86-64

Goal:

In OCI /tmp does not have any separate mount point. This document explains how to create a separate mount point for /tmp and mount it with noexec, nodev and nosuid options for security reasons.

Solution:

Here /tmp is created as a file and mounted as a partition using loop mount option. Make sure there is enough free space under / to spare a 2G file for /tmp. Run df -h command to verify the free space.

Use dd command to create a file of 2G. Change the count if you want to increase the size.