finit: /run: Mount with nosuid,nodev,noexec for added security

Signed-off-by: Joachim Nilsson <troglobit@gmail.com>
This commit is contained in:
Joachim Nilsson committed 2020-04-15 19:28:23 +02:00
1 parent cb802cd54e
commit 7c8b0df720
1 file changed
+1 -1
+1 -1
View File
@@ -440,7 +440,7 @@ int main(int argc, char *argv[])
* For details, see http://lwn.net/Articles/436012/ * For details, see http://lwn.net/Articles/436012/
*/ */
if (fisdir("/run") && !fismnt("/run")) if (fisdir("/run") && !fismnt("/run"))
mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%"); mount("tmpfs", "/run", "tmpfs", MS_NODEV, "mode=0755,size=10%,nosuid,nodev,noexec");
umask(022); umask(022);
/* Bootstrap conditions, needed for hooks */ /* Bootstrap conditions, needed for hooks */