From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 2 Aug 2022 16:21:52 +0000 (+0000)
Subject: mount: Bring back /tmp to jail
X-Git-Tag: 0.9.28~625
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b1a6d98cad01eb566e17036e088fbda9aa6a1722;p=pakfire.git

mount: Bring back /tmp to jail

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/libpakfire/mount.c b/src/libpakfire/mount.c
index 48e49a048..321d702d8 100644
--- a/src/libpakfire/mount.c
+++ b/src/libpakfire/mount.c
@@ -84,8 +84,12 @@ static const struct pakfire_mountpoint {
 		MS_NOSUID|MS_NOEXEC|MS_NODEV, NULL },
 
 	// Create a new /run
-	{ "pakfire_tmpfs",       "run",                "tmpfs",  MS_NOSUID|MS_NOEXEC|MS_NODEV,
-		"mode=755,size=4m,nr_inodes=1k", },
+	{ "pakfire_run",          "run",               "tmpfs",  MS_NOSUID|MS_NOEXEC|MS_NODEV,
+		"mode=755,size=256m,nr_inodes=1k", },
+
+	// Create a new /tmp
+	{ "pakfire_tmp",          "tmp",               "tmpfs",
+		MS_NOSUID|MS_NODEV|MS_STRICTATIME, "mode=1777,size=1024m", },
 
 	// The end
 	{ NULL },