kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

95sel-ebc: Harden boot mount service

Browse Source 
Pin the supported filesystem type to ext4 to prevent the risk of auto fs
parsing bugs. Additionally mount the boot partition with more
restrictive options.

Reviewed-by: Holger Dengler <dengler@linux.ibm.com>
Signed-off-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Finn Callies
2026-07-03 09:45:40 +02:00
committed by Jan Höppner
parent 4f9e5d7842
commit 17007ab121
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rust/pvebc/95sel-ebc/boot-mount.sh
View File

@@ -26,6 +26,6 @@ else
fi
echo "Mounting ${block_dev} to ${mntp}"
mount --options ro "${block_dev}" "${mntp}"
mount -t ext4 --options ro,nodev,nosuid,noexec "${block_dev}" "${mntp}"
exit 0