How to to mount /tmp and /var/tmp with noexec and nosuid :

mount -t tmpfs -o noexec,nosuid tmpfs /tmp/
mount -t tmpfs -o noexec,nosuid tmpfs /var/tmp/

See also :

https://kb.iweb.com/entries/23960922-Augmenter-la-s%C3%A9curit%C3%A9-du-serveur-Linux-avec-les-options-nodev-nosuid-et-noexec?locale=16