Mark /proc MS_NOSUID and MS_NOEXEC
Not that we really need this any more, but at the same time there's no reason not to do this. Signed-off-by: Linus Torvalds <torvalds@osdl.org>
This commit is contained in:
parent
2724a1a55f
commit
92d032855e
|
@ -192,7 +192,7 @@ int proc_fill_super(struct super_block *s, void *data, int silent)
|
|||
{
|
||||
struct inode * root_inode;
|
||||
|
||||
s->s_flags |= MS_NODIRATIME;
|
||||
s->s_flags |= MS_NODIRATIME | MS_NOSUID | MS_NOEXEC;
|
||||
s->s_blocksize = 1024;
|
||||
s->s_blocksize_bits = 10;
|
||||
s->s_magic = PROC_SUPER_MAGIC;
|
||||
|
|
Loading…
Reference in a new issue