Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-17 22:19:18 -04:00
Code Issues Projects Releases Packages Wiki Activity

remount-secure: disable debugging to save space in initrd

Browse source
This commit is contained in:
Patrick Schleizer 2023-10-26 18:45:07 -04:00
parent ca9603af17
commit 1123d23114
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 16 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
usr/bin/remount-secure
View file

@ -23,10 +23,13 @@ init() {
$output_command "$0: INFO: START" $output_command "$0: INFO: START"
## dracut does not have id. Saving space in initial ramdisk.
if command -v id &>/dev/null ; then
if [ "$(id -u)" != "0" ]; then if [ "$(id -u)" != "0" ]; then
$output_command "ERROR: must be run as root! sudo $0" $output_command "ERROR: must be run as root! sudo $0"
exit 1 exit 1
fi fi
fi
mkdir --parents "/run/remount-secure" mkdir --parents "/run/remount-secure"
exit_code=0 exit_code=0

14
usr/lib/dracut/modules.d/20remount-secure/module-setup.sh
View file

@ -5,11 +5,14 @@
# called by dracut # called by dracut
check() { check() {
## For debugging only.
## Saving space in initial ramdisk.
#require_binaries id || return 1
#require_binaries env || return 1
require_binaries findmnt || return 1 require_binaries findmnt || return 1
require_binaries touch || return 1 require_binaries touch || return 1
require_binaries grep || return 1 require_binaries grep || return 1
require_binaries id || return 1
require_binaries env || return 1
require_binaries mount || return 1 require_binaries mount || return 1
require_binaries remount-secure || return 1 require_binaries remount-secure || return 1
return 0 return 0
@ -22,11 +25,14 @@ depends() {
# called by dracut # called by dracut
install() { install() {
## For debugging only.
## Saving space in initial ramdisk.
#inst_multiple id
#inst_multiple env
inst_multiple findmnt inst_multiple findmnt
inst_multiple touch inst_multiple touch
inst_multiple grep inst_multiple grep
inst_multiple id
inst_multiple env
inst_multiple mount inst_multiple mount
inst_multiple remount-secure inst_multiple remount-secure
inst_hook cleanup 90 "$moddir/remount-secure.sh" inst_hook cleanup 90 "$moddir/remount-secure.sh"