do not mount /dev/cdrom by default

https://github.com/Kicksecure/security-misc/issues/157
This commit is contained in:
Patrick Schleizer 2023-12-25 10:30:35 -05:00
parent 9fce67fcd9
commit 971ff687b1
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -11,7 +11,9 @@ proc /proc pr
## nodev,nosuid,noexec as per:
## https://www.debian.org/doc/manuals/securing-debian-manual/ch04s10.en.html
/dev/cdrom /mnt/cdrom iso9660 nofail,ro,users,nodev,nosuid,noexec 0 0
## Commented out by default to prevent warning:
## mount: /mnt/cdrom: mount point does not exist.
#/dev/cdrom /mnt/cdrom iso9660 nofail,ro,users,nodev,nosuid,noexec 0 0
/boot /boot none nofail,bind,nosuid,nodev,noexec 0 0