mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-24 19:28:09 +00:00
Make /run nosuid,noexec
This was not sufficiently locked down. Fix #720 Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
f2b8beb0ee
commit
80c9cee485
@ -1 +1 @@
|
||||
tmpfs /run tmpfs defaults,nodev,relatime,size=10%,mode=755 0 0
|
||||
tmpfs /run tmpfs defaults,nodev,nosuid,noexec,relatime,size=10%,mode=755 0 0
|
||||
|
Loading…
Reference in New Issue
Block a user