mirrors/krata
1
0 Fork 0
mirror of https://github.com/edera-dev/krata.git synced 2026-11-04 13:22:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

zone: init: mount /proc with hidepid=1 (#277)

Browse Source 
Mounting procfs with hidepid=1 denies access to procfs directories
for processes not accessible by the current user credentials.

Signed-off-by: Ariadne Conill <[email protected]>
This commit is contained in:
Ariadne Conill authored and GitHub committed 2024-07-22 06:11:36 +00:00
1 parent c8795fa08d
commit 8806a79161
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
crates/zone/src/init.rs
+1 -1
View File
@@ -147,7 +147,7 @@ impl ZoneInit {
self.create_dir("/run", Some(0o0755)).await?;
self.mount_kernel_fs("devtmpfs", "/dev", "mode=0755", None, None)
.await?;
self.mount_kernel_fs("proc", "/proc", "", None, None)
self.mount_kernel_fs("proc", "/proc", "hidepid=1", None, None)
.await?;
self.mount_kernel_fs("sysfs", "/sys", "", None, None)
.await?;