Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-25 21:49:24 -05:00
Code Issues Packages Projects Releases Wiki Activity

no longer remount /lib

Browse Source 
https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
This commit is contained in:
Patrick Schleizer 2019-12-21 14:06:10 -05:00
parent 10c19d6a8f
commit 1e8457ea47
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
usr/lib/security-misc/remount-secure
View File

@ -106,11 +106,12 @@ _tmp() {
remount_secure "$@"
}
_lib() {
## Not using noexec on /lib.
new_mount_options="nosuid,nodev"
remount_secure "$@"
}
## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
# _lib() {
# ## Not using noexec on /lib.
# new_mount_options="nosuid,nodev"
# remount_secure "$@"
# }
end() {
exit $exit_code
@ -121,7 +122,7 @@ main() {
_run "$@"
_dev_shm "$@"
_tmp "$@"
_lib "$@"
#_lib "$@"
end "$@"
}