SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

meson: allow to customize the access mode for tty/pts devices

Browse Source 
Then, switch the default value to "0600", due to general security
concerns about terminals being written to by other users.

Closing #35599.
This commit is contained in:
Yu Watanabe
2024-12-16 21:36:07 +00:00
committed by Luca Boccassi
parent 0543b02cf8
commit a4d1891475
8 changed files with 27 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/shared/mount-setup.c
+1 -1
View File
@@ -93,7 +93,7 @@ static const MountPoint mount_table[] = {
#endif
{ "tmpfs", "/dev/shm", "tmpfs", "mode=01777", MS_NOSUID|MS_NODEV|MS_STRICTATIME,
NULL, MNT_FATAL|MNT_IN_CONTAINER },
{ "devpts", "/dev/pts", "devpts", "mode=0620,gid=" STRINGIFY(TTY_GID), MS_NOSUID|MS_NOEXEC,
{ "devpts", "/dev/pts", "devpts", "mode=" STRINGIFY(TTY_MODE) ",gid=" STRINGIFY(TTY_GID), MS_NOSUID|MS_NOEXEC,
NULL, MNT_IN_CONTAINER },
#if ENABLE_SMACK
{ "tmpfs", "/run", "tmpfs", "mode=0755,smackfsroot=*" TMPFS_LIMITS_RUN, MS_NOSUID|MS_NODEV|MS_STRICTATIME,