aports/main/openrc/0010-noexec-devfs.patch
omni ef67683aa0 main/openrc: default mount /dev noexec
Users who still need to be able to exec from /dev can use the following
fstab entry to override the default

  devtmpfs /dev devtmpfs exec,nosuid,mode=0755 0 0

Also fix linter SC2035 warning.
2022-03-15 16:31:11 +00:00

15 lines
497 B
Diff

--- a/init.d/devfs.in
+++ b/init.d/devfs.in
@@ -24,8 +24,9 @@ mount_dev()
action=--mount
conf_d_dir="${RC_SERVICE%/*/*}/conf.d"
msg=Mounting
- # Some devices require exec, Bug #92921
- mountopts="exec,nosuid,mode=0755"
+ # Some devices require exec, https://bugs.gentoo.org/92921
+ # Users with such requirements can use an fstab entry for /dev
+ mountopts="noexec,nosuid,mode=0755"
if yesno ${skip_mount_dev:-no} ; then
einfo "/dev will not be mounted due to user request"
return 0