From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 1 Mar 2021 17:02:24 +0000 (+0100)
Subject: Revert "core: do not set noexec on sysfs/procfs"
X-Git-Tag: v249-rc3~15
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=988bcc7c21a07acc08f9343b52b492b98b08444a;p=thirdparty%2Fsystemd.git

Revert "core: do not set noexec on sysfs/procfs"

This reverts commit b33cd6b3eec52fc50c6c34d6f07a41cc6254c27f.
---

diff --git a/src/core/namespace.c b/src/core/namespace.c
index b9a3f71ae74..982aeeac191 100644
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -275,7 +275,7 @@ static bool mount_entry_read_only(const MountEntry *p) {
 static bool mount_entry_noexec(const MountEntry *p) {
         assert(p);
 
-        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE);
+        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE, SYSFS, PROCFS);
 }
 
 static bool mount_entry_exec(const MountEntry *p) {