#!/sbin/openrc-run

name=nosuid
description="Disable suid access on root filesystem except listed"

depend() {
    before dbus
}

start() {
    # block all suid binaries
    mount -o remount,nosuid /
    # allow suid list
    cat /etc/suid /etc/suid.d/* 2>/dev/null | while read file ; do
        mount --bind $file $file -o suid || true
    done
}