picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

units: add nosuid and nodev options to tmp.mount (#3575) 

This makes privilege escalation attacks harder by putting traps and exploits
into /tmp.

https://bugs.debian.org/826377
This commit is contained in:
Martin Pitt 2016-06-22 12:32:59 +02:00 committed by Lennart Poettering
parent e382c49f1d
commit 2f9df7c96a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
units/tmp.mount.m4
View File

@ -19,4 +19,4 @@ After=swap.target
What=tmpfs
Where=/tmp
Type=tmpfs
Options=mode=1777,strictatime
Options=mode=1777,strictatime,nosuid,nodev