From c78df0037d8d81ccac914f3ac2491932cdea82a7 Mon Sep 17 00:00:00 2001
From: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Thu, 1 Oct 2009 11:06:42 -0700
Subject: Mount floppy with safer options

Change how floppy is mounted to avoid updates and possible security
issues:
        noatime - don't update last access time (avoids writing to floppy)
        noexec  - don't allow running programs off floppy
        nosuid  - block setuid programs
        nodev   - no device special files allowed
---
 scripts/init-floppy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'scripts')

diff --git a/scripts/init-floppy b/scripts/init-floppy
index affaa1d1..1685a464 100755
--- a/scripts/init-floppy
+++ b/scripts/init-floppy
@@ -89,7 +89,7 @@ echo "$create_notice"
     failure "$create__error"
 
 echo "$mount__notice"
-/bin/mount /dev/fd0 $fd -t ext2 -o sync &>/dev/null || \
+/bin/mount /dev/fd0 $fd -t ext2 -o sync,noatime,noexec,nosuid,nodev &>/dev/null || \
     failure "$mount___error"
 
 /bin/mkdir $fd/config
-- 
cgit v1.2.3