chiark / gitweb /
core: remount /sys/fs/cgroup/ read-only after we mounted all controllers
authorLennart Poettering <lennart@poettering.net>
Tue, 18 Mar 2014 03:06:54 +0000 (04:06 +0100)
committerLennart Poettering <lennart@poettering.net>
Tue, 18 Mar 2014 03:48:26 +0000 (04:48 +0100)
commit679142ce4a8def7da43c4d3b2a02bae8c0d21175
treee4e2b1b1fda6e1c78073da26f2d12dee2ff3235c
parenta641dcd9bf05418d6a6c165e1c0cff615b4a0f47
core: remount /sys/fs/cgroup/ read-only after we mounted all controllers

Given that glibc searches for /dev/shm by just looking for any tmpfs we
should be more careful with providing tmpfs instances arbitrary code
might end up writing to.
src/core/mount-setup.c