X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fprocd.git;a=blobdiff_plain;f=plug%2Fcoldplug.c;h=5fcb9a333200d5d32fad5f7f98d8359f05c4fc6b;hp=bfd3513ce4f45496eb1da637f9df5526ff32e7f6;hb=2909fab250c033eaad2b02d1b28b795d417d58e3;hpb=b6618ffab8ed4981c57f53929276559698541462

diff --git a/plug/coldplug.c b/plug/coldplug.c
index bfd3513..5fcb9a3 100644
--- a/plug/coldplug.c
+++ b/plug/coldplug.c
@@ -19,6 +19,7 @@
 #include <unistd.h>
 
 #include "../procd.h"
+#include "../libc-compat.h"
 
 #include "hotplug.h"
 
@@ -44,11 +45,11 @@ void procd_coldplug(void)
 
 	umount2("/dev/pts", MNT_DETACH);
 	umount2("/dev/", MNT_DETACH);
-	mount("tmpfs", "/dev", "tmpfs", 0, "mode=0755,size=512K");
-	symlink("/tmp/shm", "/dev/shm");
+	mount("tmpfs", "/dev", "tmpfs", MS_NOSUID, "mode=0755,size=512K");
+	ignore(symlink("/tmp/shm", "/dev/shm"));
 	mkdir("/dev/pts", 0755);
 	umask(oldumask);
-	mount("devpts", "/dev/pts", "devpts", 0, 0);
+	mount("devpts", "/dev/pts", "devpts", MS_NOEXEC | MS_NOSUID, 0);
 	udevtrigger.cb = udevtrigger_complete;
 	udevtrigger.pid = fork();
 	if (!udevtrigger.pid) {