summaryrefslogtreecommitdiff
path: root/units/sys-kernel-debug.mount
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2019-03-25 19:39:00 +0100
committerLennart Poettering <lennart@poettering.net>2019-03-25 19:39:00 +0100
commit5cb02182fd875884ce27636e3c694705a525de94 (patch)
tree05bb980503a352e8ecfa156803bee3d0c62a108c /units/sys-kernel-debug.mount
parent60a3e982f44778142b5adce96f2caaa0a11b6d54 (diff)
downloadsystemd-5cb02182fd875884ce27636e3c694705a525de94.tar.gz
units: set nodev,nosuid,noexec flags for various secondary API VFS
A couple of API VFS we mount via .mount units. Let's set the three flags for those too, just in case. This is just paranoia, nothing else, but shouldn't hurt.
Diffstat (limited to 'units/sys-kernel-debug.mount')
-rw-r--r--units/sys-kernel-debug.mount1
1 files changed, 1 insertions, 0 deletions
diff --git a/units/sys-kernel-debug.mount b/units/sys-kernel-debug.mount
index 53ce820b87..618270ddae 100644
--- a/units/sys-kernel-debug.mount
+++ b/units/sys-kernel-debug.mount
@@ -20,3 +20,4 @@ Before=sysinit.target
What=debugfs
Where=/sys/kernel/debug
Type=debugfs
+Options=nosuid,nodev,noexec