From ba5f5c8596fbf90a4c24a7d177e0b2775ec8e8ec Mon Sep 17 00:00:00 2001 From: smitsohu Date: Tue, 13 Jul 2021 22:48:13 +0200 Subject: tmpfs mounts: also clear MS_REMOUNT flag (#4387) --- src/firejail/fs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/firejail/fs.c b/src/firejail/fs.c index 0e26eb505..e3b9d6137 100644 --- a/src/firejail/fs.c +++ b/src/firejail/fs.c @@ -489,7 +489,7 @@ void fs_tmpfs(const char *dir, unsigned check_owner) { struct statvfs buf; if (fstatvfs(fd, &buf) == -1) errExit("fstatvfs"); - unsigned long flags = buf.f_flag & ~(MS_RDONLY|MS_BIND); + unsigned long flags = buf.f_flag & ~(MS_RDONLY|MS_BIND|MS_REMOUNT); // mount via the symbolic link in /proc/self/fd EUID_ROOT(); char *proc; -- cgit v1.2.3-54-g00ecf