Mount /rw and /home with nosuid + nodev

implements https://github.com/QubesOS/qubes-issues/issues/5263
This commit is contained in:
Patrick Schleizer 2019-08-28 11:01:09 +00:00 committed by GitHub
parent 347f98b8b6
commit 5dbca47811
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -2,8 +2,8 @@
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
# #
/dev/mapper/dmroot / ext4 defaults,discard,noatime 1 1 /dev/mapper/dmroot / ext4 defaults,discard,noatime 1 1
/dev/xvdb /rw auto noauto,defaults,discard 1 2 /dev/xvdb /rw auto noauto,defaults,discard,nosuid,nodev 1 2
/rw/home /home none noauto,bind,defaults 0 0 /rw/home /home none noauto,bind,defaults,nosuid,nodev 0 0
/rw/usrlocal /usr/local none noauto,bind,defaults 0 0 /rw/usrlocal /usr/local none noauto,bind,defaults 0 0
/dev/xvdc1 swap swap defaults 0 0 /dev/xvdc1 swap swap defaults 0 0
tmpfs /dev/shm tmpfs defaults,size=1G 0 0 tmpfs /dev/shm tmpfs defaults,size=1G 0 0