Use the same options for proc and sysfs as Gentoo/OpenRC uses

diff --git a/defaults/initrd.scripts b/defaults/initrd.scripts
index 4a12b73ed44abd4a5c45e435ea7bb158d1c574ea..b228a77f9074f19b921af63e8ed4595b793a81da 100755 (executable)
--- a/defaults/initrd.scripts
+++ b/defaults/initrd.scripts
@@ -210,7 +210,7 @@ cache_cd_contents() {
 }
 
 mount_sysfs() {
-       mount -t sysfs /sys /sys >/dev/null 2>&1
+       mount -t sysfs sysfs /sys -o noexec,nosuid,nodev >/dev/null 2>&1
        ret=$?
        [ ${ret} -eq 0 ] || bad_msg "Failed to mount /sys!"
 }

diff --git a/defaults/linuxrc b/defaults/linuxrc
index 61efc9537ad250dc4e140a234d9bcc6874a8635c..115f1f52aad2bfb0ac50a2471866cac7121cafbc 100755 (executable)
--- a/defaults/linuxrc
+++ b/defaults/linuxrc
@@ -20,7 +20,7 @@ then
        exit 1
 fi
 
-mount -t proc proc /proc >/dev/null 2>&1
+mount -t proc -o noexec,nosuid,nodev proc /proc >/dev/null 2>&1
 mount -o remount,rw / >/dev/null 2>&1
 
 # Set up symlinks