eCryptfs

  1. Bug #1020904
  2. Comment #17

Comment 17 for bug 1020904

Revision history for this message
Marcus Meissner (meissner) wrote :

we have one more adjusment

ecryptfs-utils-96.orig/src/utils/mount.ecryptfs_private.c

- if (mount(src, ".", FSTYPE, 0, opt) == 0) {
+ if (mount(src, ".", FSTYPE, MS_NOSUID|MS_NODEV, opt) == 0) {

So pass in both MS_NOSUID and MS_NODEV just for the chance that someone tries to put a setuid binary or device node under us.