[projects/geninitrd] Also mount /run as noexec,nosuid,nodev (as suggested by qboosh).

arekm arekm at pld-linux.org
Tue Jun 7 16:52:24 CEST 2016


commit 7e3c63ed836b899d5217506e408b35284b6a00bc
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Tue Jun 7 16:52:17 2016 +0200

    Also mount /run as noexec,nosuid,nodev (as suggested by qboosh).

 geninitrd | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/geninitrd b/geninitrd
index 62e47ee..e94ca12 100755
--- a/geninitrd
+++ b/geninitrd
@@ -273,7 +273,7 @@ mount_run() {
 	fi
 
 	run_mounted=yes
-	echo "mount -t tmpfs run /run -o mode=0755" | add_linuxrc
+	echo "mount -t tmpfs run /run -o mode=0755,noexec,nosuid,nodev" | add_linuxrc
 }
 
 # unmount all mountpoints mounted by geninitrd
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/projects/geninitrd.git/commitdiff/7e3c63ed836b899d5217506e408b35284b6a00bc



More information about the pld-cvs-commit mailing list