1 files changed, 1 insertions, 1 deletions

diff --git a/src/firejail/fs.c b/src/firejail/fs.c
index c1de53ee5..6695fc6b4 100644
--- a/src/firejail/fs.c
+++ b/src/firejail/fs.c
@@ -515,7 +515,7 @@ void fs_proc_sys_dev_boot(void) {
 
         // remount /proc/sys readonly
         if (mount("/proc/sys", "/proc/sys", NULL, MS_BIND | MS_REC, NULL) < 0 ||
-            mount(NULL, "/proc/sys", NULL, MS_BIND | MS_REMOUNT | MS_RDONLY | MS_REC, NULL) < 0)
+            mount(NULL, "/proc/sys", NULL, MS_BIND | MS_REMOUNT | MS_RDONLY | MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_REC, NULL) < 0)
                 errExit("mounting /proc/sys");
         fs_logger("read-only /proc/sys");