diff --git a/usr/lib/security-misc/remount-secure b/usr/lib/security-misc/remount-secure index b90ef80..d293efc 100755 --- a/usr/lib/security-misc/remount-secure +++ b/usr/lib/security-misc/remount-secure @@ -68,6 +68,14 @@ tmp() { touch "/var/run/remount-secure/${FUNCNAME}" } +securityfs() { + if [ -e "/var/run/remount-secure/${FUNCNAME}" ]; then + return 0 + fi + mount -o nosuid,nodev${noexec_maybe} --bind /tmp /tmp || exit_code=5 + touch "/var/run/remount-secure/${FUNCNAME}" +} + end() { exit $exit_code } @@ -77,6 +85,7 @@ main() { run "$@" shm "$@" tmp "$@" + securityfs "$@" end "$@" }