nixCraft

We have three Linux and one FreeBSD server for hosting customer's domains. On all systems, we have separate partition called /dev/device mounted on /wwwdata (example /wwwdata/mydomain.com is webroot for virtual host and ftp account)

I would like to know how to secure this mount point, as I have noticed some users can create dangerous stuff in /tmp (especially those with shell account) using perl or even compiled and what not causing security risk; though I have uninstalled gcc so that they cannot install and compile anything downloaded from net.. I am trying to find answer via google but no luck so far... I need gcc as we have custom compiled postfix, apache and other stuff as per our needs

__________________
There's no place like 127.0.0.1

To Secure mount point

Use mount options to help prevent intruders or your own users from executing program
For example /tmp cannot be used to execute program add -o nodev,noexec,nosuid /tmp or /wwwdata mount point in /etc/fstab
# mount -o nodev,noexec,nosuid /dev/sda2 /wwwdata
# mount -o nodev,noexec,nosuid /dev/hda3 /tmp

Above flags to mount, commands are available on both Linux (ext2/3) and FreeBSD file systems.

Secure ftp login using chroot feature, since you have not mentioned your ftp server I can't give exact info on this... however all modern ftp server has this feature so user ftp in they can't move to /tmp or something else...

Hope this helps