harden /run mount

Signed-off-by: Zen <[email protected]>
desultory · Nov 20, 2024 · cf02d62 · cf02d62
1 parent 3f5a080
commit cf02d62
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/ugrd/fs/mounts.toml b/src/ugrd/fs/mounts.toml
@@ -101,4 +101,5 @@ base_mount = true
 [mounts.run]
 type = "tmpfs"
 path = "tmpfs"
+options = ["nosuid", "noexec", "nodev", "mode=0755"]
 base_mount = true