Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

add hardened fstab /usr/share/doc/security-misc/fstab-vm

Browse Source 
to the documentation folder as an example

not directly used by security-misc

will later be used by Kicksecure VM build process

https://github.com/Kicksecure/security-misc/issues/157
This commit is contained in:
Patrick Schleizer 2023-12-12 11:50:11 -05:00
parent dcaafa6c8b
commit 039de1dc9b
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
usr/share/doc/security-misc/fstab-vm Normal file
View File

@ -0,0 +1,41 @@
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/disk/by-uuid/26ada0c0-1165-4098-884d-aafd2220c2c6 / auto defaults,errors=remount-ro 0 1
proc /proc proc defaults 0 0
/dev /dev none bind 0 0
/dev /dev none remount,nosuid,noexec 0 0
## noexec optional
/dev/shm /dev/shm tmpfs nosuid,nodev,noexec 0 0
/dev/cdrom /mnt/cdrom0 iso9660 ro,user,noauto 0 0
/boot /boot none bind 0 0
/boot /boot none remount,nosuid,nodev,noexec 0 0
/lib /lib none bind 0 0
/lib /lib none remount,nosuid,nodev 0 0
## noexec optional
/tmp /tmp none bind 0 0
/tmp /tmp none remount,nosuid,nodev,noexec 0 0
/var /var none bind 0 0
/var /var none remount,nosuid,nodev 0 0
## noexec optional
/var/tmp /var/tmp none bind 0 0
/var/tmp /var/tmp none remount,nosuid,nodev,noexec 0 0
/var/log /var/log none bind 0 0
/var/log /var/log none remount,nosuid,nodev,noexec 0 0
## noexec optional
/run /run none bind 0 0
/run /run none remount,nosuid,nodev,noexec 0 0
## noexec optional
/home /home none bind 0 0
/home /home none remount,nosuid,nodev,noexec 0 0