Mount filesystems without executable permissions since they should never

be used.

Reviewed by:	cem
MFC after:	1 week
Sponsored by:	DARPA, AFRL
Differential Revision:	https://reviews.freebsd.org/D8513

diff --git a/bin/df/df.c b/bin/df/df.c
index e07df3270356c3ec2fbd8c2668dd20d8e13fd361..3ed7c1e8f49cf1cd6ef5bd847bbdbc8b244bab60 100644 (file)
--- a/bin/df/df.c
+++ b/bin/df/df.c
@@ -251,7 +251,7 @@ main(int argc, char *argv[])
                                        free(mntpath);
                                        continue;
                                }
-                               if (mount(fstype, mntpt, MNT_RDONLY,
+                               if (mount(fstype, mntpt, MNT_RDONLY|MNT_NOEXEC,
                                    &mdev) != 0) {
                                        xo_warn("%s", *argv);
                                        rv = 1;