How do I enable/disable securetmp?

Question

How do I enable/disable securetmp?

Answer

This can be done with the /scripts/securetmp script. It adjusts the size of your /tmp partition, as well as adjusts your server's /tmp mount settings. If the Server Administrator makes customizations to /tmp's mount, the changes would be overridden by the script.

To enable securetmp:

1. Execute the /scripts/securetmp script.

   # /scripts/securetmp

2. Answer the prompt with Y or N as shown below:

   CONFIG_TEXT: Would you like to secure /tmp & /var/tmp at boot time? (y/n) y
   Would you like to secure /tmp & /var/tmp now? (y/n) y

To disable securetmp:

1. Execute the /scripts/securetmp script.

   # /scripts/securetmp

2. Answer the prompt with Y or N as shown below:

   CONFIG_TEXT: Would you like to secure /tmp & /var/tmp at boot time? (y/n) n
   Would you like to disable securetmp from the system startup? (y/n) y
   Would you like to secure /tmp & /var/tmp now? (y/n) n

3. Create the following touch file to disable its execution entirely.

   # mkdir -p /var/cpanel/disabled ; touch /var/cpanel/disabled/securetmp

4. Reboot the server.

   # reboot

Note: The /etc/fstab file may contain an entry like the following for securetmp, but it will not be used if securetmp is disabled.
/usr/tmpDSK     /tmp     ext4     defaults,noauto     0 0

Additional Resources

Harden your tmp partition