From 80c9cee48516827a00afbcc309536275318c550e Mon Sep 17 00:00:00 2001 From: Justin Cormack Date: Wed, 23 Nov 2016 12:08:53 +0000 Subject: [PATCH] Make /run nosuid,noexec This was not sufficiently locked down. Fix #720 Signed-off-by: Justin Cormack --- alpine/etc/fstab | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/alpine/etc/fstab b/alpine/etc/fstab index 70045eb5c..9e5436b84 100644 --- a/alpine/etc/fstab +++ b/alpine/etc/fstab @@ -1 +1 @@ -tmpfs /run tmpfs defaults,nodev,relatime,size=10%,mode=755 0 0 +tmpfs /run tmpfs defaults,nodev,nosuid,noexec,relatime,size=10%,mode=755 0 0