From: Luca Boccassi <luca.boccassi@microsoft.com>
Date: Thu, 25 Feb 2021 18:49:53 +0000 (+0000)
Subject: core: do not set noexec on sysfs/procfs
X-Git-Tag: v248-rc3~100
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b33cd6b3eec52fc50c6c34d6f07a41cc6254c27f;p=thirdparty%2Fsystemd.git

core: do not set noexec on sysfs/procfs

It causes a regression in certain running environments (networkd under LXC),
so avoid enabling for now.

Fixes #18795

Suggested-by: Topi Miettinen <toiwoton@gmail.com>
---

diff --git a/src/core/namespace.c b/src/core/namespace.c
index f9a33e16bc9..829fa61738b 100644
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -272,7 +272,7 @@ static bool mount_entry_read_only(const MountEntry *p) {
 static bool mount_entry_noexec(const MountEntry *p) {
         assert(p);
 
-        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE, SYSFS, PROCFS);
+        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE);
 }
 
 static bool mount_entry_exec(const MountEntry *p) {