| commit | 61dab115054cf23c589269ace3aa8f442dcabf0f | [log] [tgz] |
|---|---|---|
| author | Allen Webb <allenwebb@google.com> | Thu Aug 09 15:54:25 2018 -0700 |
| committer | chrome-bot <chrome-bot@chromium.org> | Fri Aug 10 01:44:24 2018 -0700 |
| tree | 923c029095076969718111f6ea3517b033c654a2 | |
| parent | f4065c99bba1d98420e123ea11e87cc484293023 [diff] |
cras.sh: Tighten minijail mount options. Minijail mountpoints with tmpfs need these additional options to prevent an attacker from use setuid binaries or executables. BUG=None TEST=cras still works Change-Id: I3867ffc7dec3e7272fb5daf0cf007d4e8d4b1a74 Signed-off-by: Allen Webb <allenwebb@google.com> Reviewed-on: https://chromium-review.googlesource.com/1170182 Reviewed-by: Dylan Reid <dgreid@chromium.org> Reviewed-by: Mike Frysinger <vapier@chromium.org>