Mark /proc MS_NOSUID and MS_NOEXEC
Not that we really need this any more, but at the same time there's no reason not to do this. Signed-off-by: Linus Torvalds <torvalds@osdl.org>
This commit is contained in:
@@ -192,7 +192,7 @@ int proc_fill_super(struct super_block *s, void *data, int silent)
|
|||||||
{
|
{
|
||||||
struct inode * root_inode;
|
struct inode * root_inode;
|
||||||
|
|
||||||
s->s_flags |= MS_NODIRATIME;
|
s->s_flags |= MS_NODIRATIME | MS_NOSUID | MS_NOEXEC;
|
||||||
s->s_blocksize = 1024;
|
s->s_blocksize = 1024;
|
||||||
s->s_blocksize_bits = 10;
|
s->s_blocksize_bits = 10;
|
||||||
s->s_magic = PROC_SUPER_MAGIC;
|
s->s_magic = PROC_SUPER_MAGIC;
|
||||||
|
Reference in New Issue
Block a user