X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fprocd.git;a=blobdiff_plain;f=plug%2Fcoldplug.c;h=5fcb9a333200d5d32fad5f7f98d8359f05c4fc6b;hp=49a201748d2afcaeecb96acbfa7bba8ec6987177;hb=3c771f9e4ba46d3e39334cb20eab98221043f1e2;hpb=acb157e638aa93490ca84be381c28643d50d4e4a

diff --git a/plug/coldplug.c b/plug/coldplug.c
index 49a2017..5fcb9a3 100644
--- a/plug/coldplug.c
+++ b/plug/coldplug.c
@@ -19,6 +19,7 @@
 #include <unistd.h>
 
 #include "../procd.h"
+#include "../libc-compat.h"
 
 #include "hotplug.h"
 
@@ -40,13 +41,15 @@ static void udevtrigger_complete(struct uloop_process *proc, int ret)
 void procd_coldplug(void)
 {
 	char *argv[] = { "udevtrigger", NULL };
+	unsigned int oldumask = umask(0);
 
 	umount2("/dev/pts", MNT_DETACH);
 	umount2("/dev/", MNT_DETACH);
-	mount("tmpfs", "/dev", "tmpfs", 0, "mode=0755,size=512K");
-	mkdir("/dev/shm", 01777);
+	mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755,size=512K");
+	ignore(symlink("/tmp/shm", "/dev/shm"));
 	mkdir("/dev/pts", 0755);
-	mount("devpts", "/dev/pts", "devpts", 0, 0);
+	umask(oldumask);
+	mount("devpts", "/dev/pts", "devpts", MS_NOEXEC | MS_NOSUID, 0);
 	udevtrigger.cb = udevtrigger_complete;
 	udevtrigger.pid = fork();
 	if (!udevtrigger.pid) {