http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/1
See this wiki page:
Old post:
Related: Restrict root access - #15 by madaidan SUID Disabler and Permission Hardener - #5 by Patrick (re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security? walled garden, firewall whitelisting, application whitelisting, sudo lockdown, superuser mode, protected mode What about more boot modes:
persistent + root
persistent + noroot
live + root
live + noroot
Not all might … 1...