From 7c8b0df720cc33be4981eb6a09981e9161e0530e Mon Sep 17 00:00:00 2001 From: Joachim Nilsson Date: Wed, 15 Apr 2020 19:28:23 +0200 Subject: [PATCH] finit: /run: Mount with nosuid,nodev,noexec for added security Signed-off-by: Joachim Nilsson --- src/finit.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/finit.c b/src/finit.c index 935994d1..cf245da1 100644 --- a/src/finit.c +++ b/src/finit.c @@ -440,7 +440,7 @@ int main(int argc, char *argv[]) * For details, see http://lwn.net/Articles/436012/ */ if (fisdir("/run") && !fismnt("/run")) - mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%"); + mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%,nosuid,nodev,noexec"); umask(022); /* Bootstrap conditions, needed for hooks */