mirror of
https://github.com/systemd/systemd.git
synced 2024-11-05 15:21:37 +03:00
mount-setup: disable device, execution, suid on device file systems
This commit is contained in:
parent
18149b9f57
commit
e8536954c5
@ -43,8 +43,8 @@ enum {
|
||||
static const char *table[] = {
|
||||
"proc", "/proc", "proc", NULL,
|
||||
"sysfs", "/sys", "sysfs", NULL,
|
||||
"devtmps", "/dev", "devtmpfs", "mode=755",
|
||||
"tmpfs", "/dev/shm", "tmpfs", "mode=1777",
|
||||
"devtmps", "/dev", "devtmpfs", "mode=755,noexec,nosuid",
|
||||
"tmpfs", "/dev/shm", "tmpfs", "mode=1777,nodev,noexec,nosuid",
|
||||
"devpts", "/dev/pts", "devpts", NULL,
|
||||
"cgroup", "/cgroup/debug", "cgroup", "debug",
|
||||
"debugfs", "/sys/kernel/debug", "debugfs", NULL,
|
||||
|
Loading…
Reference in New Issue
Block a user