projects
/
project
/
procd.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
jail: Add MS_NODEV MS_NOEXEC MS_NOSUID mount options where needed
[project/procd.git]
/
jail
/
jail.c
diff --git
a/jail/jail.c
b/jail/jail.c
index f459a5ee6e798d71dbd7299c486b5ef0b980ac7f..56dc9cab7337d829e5b10b192cdb50fb04f3ef88 100644
(file)
--- a/
jail/jail.c
+++ b/
jail/jail.c
@@
-193,11
+193,11
@@
static int build_jail_fs()
rmdir("/old");
if (opts.procfs) {
mkdir("/proc", 0755);
rmdir("/old");
if (opts.procfs) {
mkdir("/proc", 0755);
- mount("proc", "/proc", "proc", MS_NOATIME, 0);
+ mount("proc", "/proc", "proc", MS_NOATIME
| MS_NODEV | MS_NOEXEC | MS_NOSUID
, 0);
}
if (opts.sysfs) {
mkdir("/sys", 0755);
}
if (opts.sysfs) {
mkdir("/sys", 0755);
- mount("sysfs", "/sys", "sysfs", MS_NOATIME, 0);
+ mount("sysfs", "/sys", "sysfs", MS_NOATIME
| MS_NODEV | MS_NOEXEC | MS_NOSUID
, 0);
}
if (opts.ronly)
mount(NULL, "/", NULL, MS_RDONLY | MS_REMOUNT, 0);
}
if (opts.ronly)
mount(NULL, "/", NULL, MS_RDONLY | MS_REMOUNT, 0);