Add MS_NODEV MS_NOEXEC MS_NOSUID mount options where needed

[project/procd.git] / plug / coldplug.c

diff --git a/plug/coldplug.c b/plug/coldplug.c
index bfd3513ce4f45496eb1da637f9df5526ff32e7f6..123e17d6bdfa4c1447267570c3c60d63f5a1531b 100644 (file)
--- a/plug/coldplug.c
+++ b/plug/coldplug.c
@@ -44,11 +44,11 @@ void procd_coldplug(void)
 
        umount2("/dev/pts", MNT_DETACH);
        umount2("/dev/", MNT_DETACH);
 
        umount2("/dev/pts", MNT_DETACH);
        umount2("/dev/", MNT_DETACH);

-       mount("tmpfs", "/dev", "tmpfs", 0, "mode=0755,size=512K");
+       mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755,size=512K");

        symlink("/tmp/shm", "/dev/shm");
        mkdir("/dev/pts", 0755);
        umask(oldumask);
        symlink("/tmp/shm", "/dev/shm");
        mkdir("/dev/pts", 0755);
        umask(oldumask);

-       mount("devpts", "/dev/pts", "devpts", 0, 0);
+       mount("devpts", "/dev/pts", "devpts", MS_NOEXEC | MS_NOSUID, 0);

        udevtrigger.cb = udevtrigger_complete;
        udevtrigger.pid = fork();
        if (!udevtrigger.pid) {
        udevtrigger.cb = udevtrigger_complete;
        udevtrigger.pid = fork();
        if (!udevtrigger.pid) {