Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id 25908223A6C for ; Sun, 10 Aug 2025 17:50:33 +0000 (UTC) Received: by mail-qk1-x729.google.com with SMTP id af79cd13be357-7e841bfbc87so159198785a.2 for ; Sun, 10 Aug 2025 10:50:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1754848230; x=1755453030; darn=lists.alpinelinux.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=kouOpvjcB5IjiVddGVzwQsUEIVt942kk/vnpcYseDPU=; b=myWpFvGbQmWuIoqLfIkaxDDep+IiNGd4yBQsMXVwNoJ5UYXOSrW0zDQCkN/HrThci6 zELqyi+analKx45SUlMu5r5TGXRJSej0B+y4sHq5m+OvftEV4cEt0xjG+AX3qGBvjiw+ SGu9QTh7HC+epjDs8mitRur0VZGUeIs6OAvWwuo5EHe/DkPKUF5FH+0pDbuKjBETkgIq hhTmjtO2ETyDa7RcueXesZp34jfMVZfT/snnujRblp3O5SITGH17WcK3dRKHp1F4IjmJ avDlFqnrhPm++OArpO6uLvIB/wzGIWIoNtfw2hCfEPnn+rNgtlHILZrGErOl0N306gNX 62VA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754848230; x=1755453030; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=kouOpvjcB5IjiVddGVzwQsUEIVt942kk/vnpcYseDPU=; b=uJZmolm7WY2xa7GqcTobR6hNInZfQlhdZGB8WCkX3zo7MmIVe+Z82rHNNfPtnDoajP yIZsjyMmBDejeZSKHiokVyA7HNBYgQbMmTXVIzs8cyItfVJQ7EEOPPDe2LI0zJELojkX wDpK4wt2m1aINOvIwf+4SdVNNfGdThCAFhdPXLzdqqGPKYnMMSU7nkfdRjVf35xT0t8M YaHMnbMtnx1G0AnJ9YtQR0qJGKgm8l0CrCKbVau6oXt0PkMr9DwjSABMt1mV6FMsnxZZ LlI5IxqDm3oAAn/jJrQ/7gueYCTU/I7FFcVKC7ATWt2GgdHoIfWLJQ7l97FtatN2Z703 bEFw== X-Gm-Message-State: AOJu0YyZvCSbReb5aetOkG+HJcD3cJ1/ELI8yawR7eZt6PBlHSeNl8gb +jHvpqGJ2k0M5YuDP68ZzBcQdToj8eHfhdHTcEWIb2cK9lHC0b4h5g2e51PUxr26XymcXgLl1z/ bbEJOKfmYYlrtEgX5qLLsKQjNgHp0n+g9Sr7F X-Gm-Gg: ASbGncvAZdL0u34sAH4bEDFEq5afYxI3Pujh+M+vb30KV/Gvv6cysWvc+EbfODpx5ag fWADlV+DlVndtWh3xiJBpqyS5NsqvA7kePgChJASfhwl3rvIFKus0heO7KVlkXgkaK8TbG6ni3k ue5K6oz2VclVLREsqmdMGh6RqMoHdgORscKLPnJBYw0nj6Gwr3fB6tqXVUDY7o7VzG5eJE+9/VA Mjy2Ow= X-Google-Smtp-Source: AGHT+IH0rNEMgoc9RucFPSZfGNbhNzRT6d0YZhQ8G+J9ZeqWeuMevy42vDDqgTABJH8pf4sQqZFgACOwBG97FLmDvMQ= X-Received: by 2002:a05:620a:4712:b0:7e8:19d3:24da with SMTP id af79cd13be357-7e82c6a7a20mr1106306085a.29.1754848230472; Sun, 10 Aug 2025 10:50:30 -0700 (PDT) MIME-Version: 1.0 From: Rolf Date: Sun, 10 Aug 2025 19:50:19 +0200 X-Gm-Features: Ac12FXxi8EcnHWLZA50EtHV4aZLnzsglC239V-nhwQvOiJt_KMzs9zLmAMavfR4 Message-ID: Subject: Mount option `noexec` not working as expected? To: alpine-user@lists.alpinelinux.org Content-Type: text/plain; charset="UTF-8" Dear friends Alpine 3.22.1 x86_64 In my `/etc/fstab`, there is the following entry for my data partition, as suggested in https://wiki.alpinelinux.org/wiki/Securing_Alpine_Linux#User_and_access_management, "2. Configure mount options": 'UUID= /vol/ext4 ext4 defaults,nosuid,nodev,noexec 0 2' However, shell scripts in /vol/ext4/bin appear to be executable by the owner all the same: ``` $ ls -l /vol/ext4/bin/ total 4 -rwx------ 1 24 Aug 10 18:55 hallo.sh $ ./hallo.sh /bin/ash: ./hallo.sh: Permission denied $ $ ash ./hallo.sh hallo! ``` If done by a different user: ``` $ ./hallo.sh -ash: ./hallo.sh: Permission denied $ ash ./hallo.sh ash: can't open './hallo.sh': Permission denied `` Is there something I have misunderstood about the concept of the `noexec` option and shell scripts, or have I misconfigured something? Many thanks and best regards Rolf