Git-Mirrors/Qubes-VM-hardening
1
0
Fork 0
mirror of https://github.com/tasket/Qubes-VM-hardening.git synced 2024-10-01 06:35:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

umount in template

Browse Source
This commit is contained in:
Christopher Laprise 2019-08-14 01:34:39 -04:00
parent e385fa995b
commit 8327e1e106
No known key found for this signature in database
GPG Key ID: 448568C8B281C952
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
vm-boot-protect.sh
View File

@ -136,6 +136,7 @@ if qsvc vm-boot-protect || qsvc vm-boot-protect-root; then
# Begin exit if in template or standalone
if ! is_rwonly_persistent; then
make_immutable
umount $rw
fi
fi
@ -268,7 +269,9 @@ if qsvc vm-boot-protect-root && is_rwonly_persistent; then
fi
# Keep configs invisible at runtime...
rm -rf "$defdir" $servicedir/vm-boot-tag* $servicedir/vm-boot-protect* $errlog
if ! is_templatevm; then
rm -rf "$defdir" $servicedir/vm-boot-tag* $servicedir/vm-boot-protect* $errlog
fi
# Remove backups if indicated
if [ $save_backup = 0 ]; then