summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKarol Lewandowski <k.lewandowsk@samsung.com>2022-03-24 17:03:56 +0100
committerKarol Lewandowski <k.lewandowsk@samsung.com>2022-03-24 19:27:23 +0100
commitb54e100943117254c35aa3b2f98b64b4c58c814b (patch)
treefa9b9d24f3c75f50dbf5f8abf899fbcf07e9ff80
parent3c7df46b0c0108f34fdc2de4cafe7384e07ea1a4 (diff)
downloadsystemd-submit/tizen/20220325.021552.tar.gz
systemd-submit/tizen/20220325.021552.tar.bz2
systemd-submit/tizen/20220325.021552.zip
There is no point in having /run/user/UID mounted with exec, especially that /run itself is mounted with noexec. Change-Id: I16d46c3f3103205edf81764ca479ee0a569f90f7
-rw-r--r--src/login/user-runtime-dir.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/login/user-runtime-dir.c b/src/login/user-runtime-dir.c
index 049999a379..558f569412 100644
--- a/src/login/user-runtime-dir.c
+++ b/src/login/user-runtime-dir.c
@@ -102,7 +102,7 @@ static int user_mkdir_runtime_path(
(void) mkdir_label(runtime_path, 0700);
- r = mount("tmpfs", runtime_path, "tmpfs", MS_NODEV|MS_NOSUID, options);
+ r = mount("tmpfs", runtime_path, "tmpfs", MS_NODEV|MS_NOSUID|MS_NOEXEC, options);
if (r < 0) {
if (!IN_SET(errno, EPERM, EACCES)) {
r = log_error_errno(errno, "Failed to mount per-user tmpfs directory %s: %m", runtime_path);