noexec mount-option with selinux?

[Paul Howarth]

On Wed, 2006-06-07 at 18:03 +0200, Marten Lehmann wrote:
> Hello,
> 
> > That means a fully working solution looks something like this:
> > $ mount --bind /home/tmp/ /home/tmp/
> > $ mount -o remount,noexec /home/tmp/
> > $ mount --bind /home/tmp/ /tmp/
> 
> thanks, it really works. It even works after adding appropriate lines to 
> /etc/fstab so this is automatically done at boot time (I was afraid that 
> mount woudln't like entries with duplicate mountpoints).

Watch out if/when you come to upgrade this system; FC5's anaconda was
confused by bind mounts in fstab and they needed to be commented out
before doing the upgrade,

Paul.