Isolation: mount tmpfs by default.

2020-08-20 15:44:29 +01:00
parent a8a7eeb1fc
commit 4ad8c5b898
5 changed files with 156 additions and 67 deletions
--- a/src/nxt_fs.h
+++ b/src/nxt_fs.h
@@ -18,6 +18,30 @@
 #define NXT_MS_REC 0
 #endif

+#ifdef MS_NOSUID
+#define NXT_MS_NOSUID MS_NOSUID
+#else
+#define NXT_MS_NOSUID 0
+#endif
+
+#ifdef MS_NOEXEC
+#define NXT_MS_NOEXEC MS_NOEXEC
+#else
+#define NXT_MS_NOEXEC 0
+#endif
+
+#ifdef MS_RELATIME
+#define NXT_MS_RELATIME MS_RELATIME
+#else
+#define NXT_MS_RELATIME 0
+#endif
+
+#ifdef MS_NODEV
+#define NXT_MS_NODEV MS_NODEV
+#else
+#define NXT_MS_NODEV 0
+#endif
+

 typedef struct {
    u_char     *src;