Merge pull request #39 from rhatdan/master

We should not be mounting /run and /tmp as NOEXEC
projectatomic · Dec 20, 2016 · 61721be · 61721be
2 parents 45455fe + 6388a92
commit 61721be
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/systemdhook.c b/src/systemdhook.c
@@ -442,7 +442,7 @@ static int prestart(const char *rootfs,
 		}
 
 		/* Mount tmpfs at new temp directory */
-		if (mount("tmpfs", run_tmp_dir, "tmpfs", MS_NODEV|MS_NOSUID|MS_NOEXEC, options) == -1) {
+		if (mount("tmpfs", run_tmp_dir, "tmpfs", MS_NODEV|MS_NOSUID, options) == -1) {
 			pr_perror("Failed to mount tmpfs at %s", run_tmp_dir);
 			return -1;
 		}