mount: add nosuid,nodev,noexec switches to /var/lock and /var/run

diff --git a/units/var-lock.mount b/units/var-lock.mount
index f14ea94d0436d4550a7cba7d90d184aae92e0ab2..0ea2599b71793a24d3f65347a0b3c4a58d22b7c1 100644 (file)
--- a/units/var-lock.mount
+++ b/units/var-lock.mount
@@ -13,4 +13,4 @@ Before=local-fs.target
 What=tmpfs
 Where=/var/lock
 Type=tmpfs
-Options=mode=775,gid=lock
+Options=mode=775,gid=lock,nosuid,nodev,noexec

diff --git a/units/var-run.mount b/units/var-run.mount
index f7862895366987880e747d864ccf819bdf0db841..8ccb4bb28e9b4ae607fc816573db973a1b3127f4 100644 (file)
--- a/units/var-run.mount
+++ b/units/var-run.mount
@@ -13,4 +13,4 @@ Before=local-fs.target
 What=tmpfs
 Where=/var/run
 Type=tmpfs
-Options=mode=755
+Options=mode=755,nosuid,nodev,noexec