Comment 1 for bug 1935032

Another option would be to use a specific directory for the charm without the `noexec` restriction. It can be specified using the TMP environment variable. This allows the tool to run without remounting /tmp with `exec` (which is being specifically checked by CIS), for example:

# original issue
root@myhost:~# /usr/sbin/ilorest list -j --selector=Chassis
/usr/sbin/ilorest: error while loading shared libraries: libz.so.1: failed to map segment from shared object

# workaround via TMP
root@myhost:~# mkdir /var/lib/hw-health
root@myhost:~# export TMP=/var/lib/health
root@myhost:~# /usr/sbin/ilorest list -j --selector=Chassis
iLOrest : RESTful Interface Tool version 3.2.2
Copyright (c) 2014-2021 Hewlett Packard Enterprise Development LP
--------------------------------------------------------------------------------------------------------------------------------------------------------------
[
  {
    "@odata.context": "/redfish/v1/$metadata#Chassis.Chassis",
    "@odata.etag": "<redacted>",
    "@odata.id": "/redfish/v1/Chassis/1/",
    "@odata.type": "#Chassis.v1_10_2.Chassis",
    "AssetTag": " ",
(...)