Merge pull request #137 from desultory/dev

harden /run mount
desultory · Nov 20, 2024 · f6e1e80 · f6e1e80
2 parents e4b1e2c + cf02d62
commit f6e1e80
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/ugrd/fs/mounts.toml b/src/ugrd/fs/mounts.toml
@@ -101,4 +101,5 @@ base_mount = true
 [mounts.run]
 type = "tmpfs"
 path = "tmpfs"
+options = ["nosuid", "noexec", "nodev", "mode=0755"]
 base_mount = true