2

I'm working on a freshly installed CentOS7 with LVM. I want to bind mount /var/tmp to /tmp and added the following to /etc/fstab.

/tmp /var/tmp none rw,nodev,noexec,nosuid,bind 0 0

After a reboot, the /var/tmp is now mounted but not with bind option. I've also tried following entry in /etc/fstab

/tmp /var/tmp none bind 0 0

If I look at /etc/mtab. I can see my new mountpoint but no bind is displayed.

/dev/sda1 /boot ext4 rw,seclabel,relatime,data=ordered 0 0 /dev/mapper/system-var /var ext4 rw,seclabel,relatime,data=ordered 0 0 /dev/mapper/system-tmp /tmp ext4 rw,seclabel,relatime,data=ordered 0 0 /dev/mapper/system-home /home ext4 rw,seclabel,relatime,data=ordered 0 0 /dev/mapper/system-tmp /var/tmp ext4 rw,seclabel,relatime,data=ordered 0 0

Can anybody help me out with the correct /etc/fstab entry?

Improve this question
6
  • As a rule of thumb, the first occurrence was not made with bind. Commented Jul 6, 2016 at 18:18
  • this strange because this is the example solution provided by oscap ssg-rhel7-guide-C2S: see link : "Bind Mount /var/tmp To /tmp". But anyway, how I can bind /var/tmp to /tmp? I don't see any bind in /etc/mtab Commented Jul 7, 2016 at 6:45
  • mtab is showing clearly that /var and /var/tmp is mounted on the same physical partition... There is notably already one bind mount working. I am afraid I am not following you. Commented Jul 7, 2016 at 7:08
  • yes that is true. And normaly I would say "ok, looks good" but there is a SCAP check which is searching for the keyword "bind" inside mtab. This is the check: <ns6:pattern operation="pattern match">^[\s]*/tmp[\s]+/var/tmp[\s]+.*bind.*$</ns6:pattern>. And we need to be SCAP compliant Commented Jul 7, 2016 at 8:42
  • 1
    wrong kernel? wrong version? who knows? My Debian Jessie does not put the bind keywork inside mtab too. Commented Jul 7, 2016 at 8:46

0

Reset to default

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.