> +config DEVTMPFS_SAFE > + bool "Use nosuid,noexec mount options on devtmpfs" > + depends on DEVTMPFS > + help > + This instructs the kernel to include the MS_NOEXEC and > + MS_NOSUID mount flags when mounting devtmpfs. This prevents > + certain kinds of code-execution attacks on embedded platforms.
This description appears to be wrong as well as the code being pointless. It doesn't prevent any meaningful code execution attacks and the config entry might give people the delusion its useful or a security feature. Please provide a valid and meaningful example. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
