mirror of
https://github.com/troglobit/finit.git
synced 2026-10-02 05:52:48 +07:00
finit: /run: Mount with nosuid,nodev,noexec for added security
Signed-off-by: Joachim Nilsson <troglobit@gmail.com>
This commit is contained in:
+1
-1
@@ -440,7 +440,7 @@ int main(int argc, char *argv[])
|
||||
* For details, see http://lwn.net/Articles/436012/
|
||||
*/
|
||||
if (fisdir("/run") && !fismnt("/run"))
|
||||
mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%");
|
||||
mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%,nosuid,nodev,noexec");
|
||||
umask(022);
|
||||
|
||||
/* Bootstrap conditions, needed for hooks */
|
||||
|
||||
Reference in New Issue
Block a user