Base: Make /usr/Tests read-only since it's now suid capable

Commit cf0dbc906 recently added the ability for setuid binaries to be
located in /usr/Tests. This should really now be read only to mitigate
the potential misuse of any of the setuid binaries.
This commit is contained in:
Brian Gianforcaro 2021-10-23 23:08:27 -07:00 committed by Andreas Kling
parent 9c9aaf4d4f
commit 3e592f5959
Notes: sideshowbarker 2024-07-18 01:57:03 +09:00

View File

@ -8,6 +8,6 @@
/root /root bind bind,nodev,nosuid
/var /var bind bind,nodev,nosuid
/www /www bind bind,nodev,nosuid
/usr/Tests /usr/Tests bind bind,nodev
/usr/Tests /usr/Tests bind bind,nodev,ro
none /tmp tmp nodev,nosuid