mount-setup: disable device, execution, suid on device file systems

2010-04-10 21:46:51 +02:00
parent 18149b9f57
commit e8536954c5
1 changed files with 2 additions and 2 deletions
@@ -43,8 +43,8 @@ enum {
 static const char *table[] = {
        "proc",    "/proc",             "proc",     NULL,
        "sysfs",   "/sys",              "sysfs",    NULL,
-        "devtmps", "/dev",              "devtmpfs", "mode=755",
-        "tmpfs",   "/dev/shm",          "tmpfs",    "mode=1777",
+        "devtmps", "/dev",              "devtmpfs", "mode=755,noexec,nosuid",
+        "tmpfs",   "/dev/shm",          "tmpfs",    "mode=1777,nodev,noexec,nosuid",
        "devpts",  "/dev/pts",          "devpts",   NULL,
        "cgroup",  "/cgroup/debug",     "cgroup",   "debug",
        "debugfs", "/sys/kernel/debug", "debugfs",  NULL,