initd: allow overriding early PATH through build time define

[project/procd.git] / initd / early.c

diff --git a/initd/early.c b/initd/early.c
index e57ea9d..4343516 100644 (file)
--- a/initd/early.c
+++ b/initd/early.c
@@ -22,6 +22,7 @@
 #include <stdlib.h>
 
 #include "init.h"
+#include "../libc-compat.h"
 
 static void
 early_dev(void)
@@ -60,29 +61,36 @@ early_console(const char *dev)
 static void
 early_mounts(void)
 {
-       mount("proc", "/proc", "proc", MS_NOATIME, 0);
-       mount("sysfs", "/sys", "sysfs", MS_NOATIME, 0);
-       mount("none", "/sys/fs/cgroup", "cgroup", 0, 0);
-       mount("tmpfs", "/dev", "tmpfs", MS_NOATIME, "mode=0755,size=512K");
-       mkdir("/dev/shm", 01777);
+       unsigned int oldumask = umask(0);
+
+       mount("proc", "/proc", "proc", MS_NOATIME | MS_NODEV | MS_NOEXEC | MS_NOSUID, 0);
+       mount("sysfs", "/sys", "sysfs", MS_NOATIME | MS_NODEV | MS_NOEXEC | MS_NOSUID, 0);
+       mount("cgroup", "/sys/fs/cgroup", "cgroup",  MS_NODEV | MS_NOEXEC | MS_NOSUID, 0);
+       mount("tmpfs", "/dev", "tmpfs", MS_NOATIME | MS_NOSUID, "mode=0755,size=512K");
+       ignore(symlink("/tmp/shm", "/dev/shm"));
        mkdir("/dev/pts", 0755);
-       mount("devpts", "/dev/pts", "devpts", MS_NOATIME, "mode=600");
+       mount("devpts", "/dev/pts", "devpts", MS_NOATIME | MS_NOEXEC | MS_NOSUID, "mode=600");
        early_dev();
 
        early_console("/dev/console");
-       if (mount_zram_on_tmp())
-               mount("tmpfs", "/tmp", "tmpfs", MS_NOSUID | MS_NODEV | MS_NOATIME, NULL);
-       else
-               mkdev("*", 0600);
+       if (mount_zram_on_tmp()) {
+               mount("tmpfs", "/tmp", "tmpfs", MS_NOSUID | MS_NODEV | MS_NOATIME, 0);
+               mkdir("/tmp/shm", 01777);
+       } else {
+               mkdir("/tmp/shm", 01777);
+               mount("tmpfs", "/tmp/shm", "tmpfs", MS_NOSUID | MS_NODEV | MS_NOATIME,
+                               "mode=01777");
+       }
        mkdir("/tmp/run", 0777);
        mkdir("/tmp/lock", 0777);
        mkdir("/tmp/state", 0777);
+       umask(oldumask);
 }
 
 static void
 early_env(void)
 {
-       setenv("PATH", "/bin:/sbin:/usr/bin:/usr/sbin", 1);
+       setenv("PATH", EARLY_PATH, 1);
 }
 
 void