(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?

[madaidan]

@Patrick

Is it worth to fence off off-the-shelf malware (as defined here: https://www.whonix.org/wiki/Malware ), i.e. non-targeted / non-tailored malware? I think yes. Many users would value that a lot. Moves up the bar.

I don’t think most off-the-shelf malware would do that though. I think most would be pre-compiled.

@Patrick

Any idea for that? If yes, could you please create a new thread for that?

Edit by Patrick:

Tor Browser vs NOEXEC - Where should the Tor Browser folder be placed?

If /home is mounted with noexec in the future, the Tor Browser will not be able to run as the files are stored in /home/user/.tb/. Because of this, there needs to be a new place for it to go. See https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/ Edit by Patrick: This is solved. https://forums.whonix.org/t/tor-browser-vs-noexec-where-should-the-tor-browser-folder-be-placed/7787/23