tizen: mount /run/user/UID with noexec
authorKarol Lewandowski <k.lewandowsk@samsung.com>
Thu, 24 Mar 2022 16:03:56 +0000 (17:03 +0100)
committerŁukasz Stelmach <l.stelmach@samsung.com>
Thu, 25 Jan 2024 14:30:30 +0000 (15:30 +0100)
There is no point in having /run/user/UID mounted with exec, especially
that /run itself is mounted with noexec.

Change-Id: I16d46c3f3103205edf81764ca479ee0a569f90f7

src/login/user-runtime-dir.c

index 049999a..558f569 100644 (file)
@@ -102,7 +102,7 @@ static int user_mkdir_runtime_path(
 
                 (void) mkdir_label(runtime_path, 0700);
 
-                r = mount("tmpfs", runtime_path, "tmpfs", MS_NODEV|MS_NOSUID, options);
+                r = mount("tmpfs", runtime_path, "tmpfs", MS_NODEV|MS_NOSUID|MS_NOEXEC, options);
                 if (r < 0) {
                         if (!IN_SET(errno, EPERM, EACCES)) {
                                 r = log_error_errno(errno, "Failed to mount per-user tmpfs directory %s: %m", runtime_path);