Just a couple of side notes. Changing a partition to use noexec isn’t difficult (as long as it’s not the / partition). Just edit the fstab and then remount the partition, either by manually unmounting than mounting again, or by using the ‘-o remount’ param.
However, changing /tmp to ‘noexec’ has been known to cause problems with logrotate. This is not an InterWorx problem, but a problem with logrotate. If you do mount /tmp with ‘noexec’, you’ll start to get error messages from logrotate. Googling will provide workarounds that other people have found for this problem.
Changing a partition to noexec isn’t difficult indeed, but changing a /tmp directory to a partition is a little more complex. Isnt’it ?
I used this method a long time ago
About the logrotate, you right Socheat.
The man on logrotate says you can put shell commands between the “prerotate” and “endscript” sections of the configuration file.
So we could try putting something like
mount -o remount,exec /tmp
mount -o remount /tmp
Ah, ok, I misunderstood. You are right, if /tmp isn’t already it’s own partition, it could be difficult. And you are also correct about the prerotate and endscript options, though I’ve never tried it myself.