This makes privilege escalation attacks harder by putting traps and exploits into /tmp.
https://bugs.debian.org/826377
2f9df7c units: add nosuid and nodev options to tmp.mount (#3575)
units/tmp.mount.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Upstream: github.com