projects / project / procd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c2f1f19) | patch
Add MS_NODEV MS_NOEXEC MS_NOSUID mount options where needed
authorEtienne CHAMPETIER <champetier.etienne@gmail.com>
Sat, 19 Sep 2015 19:20:45 +0000 (19:20 +0000)
committerJohn Crispin <blogic@openwrt.org>
Sat, 3 Oct 2015 08:04:52 +0000 (10:04 +0200)
commitfafbf7338ec8304f2a0ec0ba76048fba2c01c07e
treed14acda37e8b24a044e0994a57192cc936da3380tree | snapshot
parentc2f1f1908b43f945efc99cb43b49e512ee5d02aacommit | diff
Add MS_NODEV MS_NOEXEC MS_NOSUID mount options where needed

These options aren't mandatory, but can prevent some future
bugs from being exploited. Good reading:
http://lwn.net/Articles/647757/

Value chosen by looking at fedora 22 / ubuntu 14.04

Not tested yet (away from my tests routers)

Not touching jail/jail.c as this conflict with
my pending patch serie

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
initd/early.c diff | blob | history
plug/coldplug.c diff | blob | history
OpenWrt service / process manager