mirrors/krata
1
0
Fork 0
mirror of https://github.com/edera-dev/krata.git synced 2025-08-03 05:10:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

zone: init: mount /proc with hidepid=1

Browse Source 
Mounting procfs with hidepid=1 denies access to procfs directories
for processes not accessible by the current user credentials.

Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
This commit is contained in:
Ariadne Conill
2024-07-21 21:33:43 -07:00
parent d792eb5439
commit 48416f8441
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
crates/zone/src/init.rs
View File

@ -147,7 +147,7 @@ impl ZoneInit {
self.create_dir("/run", Some(0o0755)).await?; self.create_dir("/run", Some(0o0755)).await?;
self.mount_kernel_fs("devtmpfs", "/dev", "mode=0755", None, None) self.mount_kernel_fs("devtmpfs", "/dev", "mode=0755", None, None)
.await?; .await?;
self.mount_kernel_fs("proc", "/proc", "", None, None) self.mount_kernel_fs("proc", "/proc", "hidepid=1", None, None)
.await?; .await?;
self.mount_kernel_fs("sysfs", "/sys", "", None, None) self.mount_kernel_fs("sysfs", "/sys", "", None, None)
.await?; .await?;