diff options
Diffstat (limited to 'modules/pam_namespace/README')
| -rw-r--r-- | modules/pam_namespace/README | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/modules/pam_namespace/README b/modules/pam_namespace/README index 6c580d6a..106a073a 100644 --- a/modules/pam_namespace/README +++ b/modules/pam_namespace/README @@ -169,7 +169,10 @@ contain the user name and will be shared among all users. mntopts=value - value of this flag is passed to the mount call when the tmpfs mount is done. It allows for example the specification of the maximum size of -the tmpfs instance that is created by the mount call. See mount(8) for details. +the tmpfs instance that is created by the mount call. In addition to options +specified in the tmpfs(5) manual the nosuid, noexec, and nodev flags can be +used to respectively disable setuid bit effect, disable running executables, +and disable devices to be interpreted on the mounted tmpfs filesystem. The directory where polyinstantiated instances are to be created, must exist and must have, by default, the mode of 0000. The requirement that the instance |