finit: /run: Mount with nosuid,nodev,noexec for added security

Signed-off-by: Joachim Nilsson <troglobit@gmail.com>
This commit is contained in:
Joachim Nilsson
2020-04-15 19:28:23 +02:00
parent cb802cd54e
commit 7c8b0df720
+1 -1
View File
@@ -440,7 +440,7 @@ int main(int argc, char *argv[])
* For details, see http://lwn.net/Articles/436012/
*/
if (fisdir("/run") && !fismnt("/run"))
mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%");
mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%,nosuid,nodev,noexec");
umask(022);
/* Bootstrap conditions, needed for hooks */