CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2020/09/14 08:43:13
Modified files:
libexec/security: security
Log message:
Do not bother scanning file systems that are both nodev and nosuid
for SUID, SGID, and device files, implementing an idea that deraadt@
came up with based on a somewhat similar idea from millert@ after
a loosely related comment from Rupert Gallagher on misc@.
While here, minimally simplify the way mount options are parsed,
hoping to make the parsing more readable and also more robust.
OK millert@ deraadt@