diff --git a/src/finit.c b/src/finit.c
index 935994d1..cf245da1 100644
--- a/src/finit.c
+++ b/src/finit.c
@@ -440,7 +440,7 @@ int main(int argc, char *argv[])
 	 * For details, see http://lwn.net/Articles/436012/
 	 */
 	if (fisdir("/run") && !fismnt("/run"))
-		mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%");
+		mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%,nosuid,nodev,noexec");
 	umask(022);
 
 	/* Bootstrap conditions, needed for hooks */