mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-08-06 09:13:52 +00:00
Make /run nosuid,noexec
This was not sufficiently locked down. Fix #720 Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
6ee9eeb284
commit
de7bc5103d
@ -1 +1 @@
|
|||||||
tmpfs /run tmpfs defaults,nodev,relatime,size=10%,mode=755 0 0
|
tmpfs /run tmpfs defaults,nodev,nosuid,noexec,relatime,size=10%,mode=755 0 0
|
||||||
|
Loading…
Reference in New Issue
Block a user