From 926091c265c60e8a2fea614108e2bab76e60cfec Mon Sep 17 00:00:00 2001 From: Eelco Dolstra Date: Thu, 27 Oct 2011 17:34:16 +0000 Subject: [PATCH] * Make the permissions on /run less liberal. svn path=/nixos/trunk/; revision=30065 --- modules/system/boot/stage-1-init.sh | 2 +- modules/system/boot/stage-2-init.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/system/boot/stage-1-init.sh b/modules/system/boot/stage-1-init.sh index 68cbc36de863..68e0f7feec13 100644 --- a/modules/system/boot/stage-1-init.sh +++ b/modules/system/boot/stage-1-init.sh @@ -55,7 +55,7 @@ mkdir -p /sys mount -t sysfs none /sys mount -t tmpfs -o "mode=0755,size=@devSize@" none /dev mkdir -p /run -mount -t tmpfs -o "mode=1777,size=@runSize@" none /run +mount -t tmpfs -o "mode=0755,size=@runSize@" none /run # Process the kernel command line. diff --git a/modules/system/boot/stage-2-init.sh b/modules/system/boot/stage-2-init.sh index 649faaa8a8d5..28d721e6b655 100644 --- a/modules/system/boot/stage-2-init.sh +++ b/modules/system/boot/stage-2-init.sh @@ -126,7 +126,7 @@ rm -rf /nix/var/nix/gcroots/tmp /nix/var/nix/temproots if ! mountpoint -q /run; then rm -rf /run mkdir -m 0755 -p /run - mount -t tmpfs -o "mode=1777,size=@runSize@" none /run + mount -t tmpfs -o "mode=0755,size=@runSize@" none /run fi mkdir -m 0700 -p /run/lock