system/systemd
system/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd synced 2024-10-02 22:37:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

units: restrict hugepages fs a bit

Browse source 
suid binaries and device nodes should not be placed there, hence forbid
it.

Of all the API VFS we mount from PID 1 or via a unit file this one is
the only one where we didn't add MS_NODEV/MS_NOSUID. Let's address that,
since there's really no reason why device nodes or suid binaries would
be placed in hugetlbfs.
This commit is contained in:
Lennart Poettering 2023-04-26 16:55:42 +02:00 committed by Yu Watanabe
parent a02287eab3
commit e76b3d4ed2
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
units/dev-hugepages.mount
View file

@ -21,3 +21,4 @@ ConditionVirtualization=!private-users
What=hugetlbfs
Where=/dev/hugepages
Type=hugetlbfs
Options=nosuid,nodev