diff options
| author |   Kees Cook <keescook@chromium.org> | 2012-08-27 13:32:15 -0700 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-08-27 13:42:02 -0700 |
| commit | 82aceae4f0d42f03d9ad7d1e90389e731153898f (patch) | |
| tree | 9e39183cb3d2a971ac794da1b94d4dd7f07faa5d /fs/debugfs | |
| parent | Merge 3.6-rc3 into driver-core-next (diff) | |
| download | linux-dev-82aceae4f0d42f03d9ad7d1e90389e731153898f.tar.xz linux-dev-82aceae4f0d42f03d9ad7d1e90389e731153898f.zip | |
debugfs: more tightly restrict default mount mode
Since the debugfs is mostly only used by root, make the default mount
mode 0700. Most system owners do not need a more permissive value,
but they can choose to weaken the restrictions via their fstab.
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/debugfs')
| -rw-r--r-- | fs/debugfs/inode.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/debugfs/inode.c b/fs/debugfs/inode.c index 2c9fafbe8425..6393fd61d5c4 100644 --- a/fs/debugfs/inode.c +++ b/fs/debugfs/inode.c @@ -28,7 +28,7 @@ #include <linux/magic.h> #include <linux/slab.h> -#define DEBUGFS_DEFAULT_MODE 0755 +#define DEBUGFS_DEFAULT_MODE 0700 static struct vfsmount *debugfs_mount; static int debugfs_mount_count; |