From 9fce67fcd942a7e3e0dd2e874226fcdab5e33ba3 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Mon, 25 Dec 2023 10:28:47 -0500 Subject: [PATCH] remove superfluous, broken `remount` mount option https://github.com/Kicksecure/security-misc/issues/157 --- usr/share/doc/security-misc/fstab-vm | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/usr/share/doc/security-misc/fstab-vm b/usr/share/doc/security-misc/fstab-vm index 84ab4ad..a6b8ba7 100644 --- a/usr/share/doc/security-misc/fstab-vm +++ b/usr/share/doc/security-misc/fstab-vm @@ -13,20 +13,20 @@ proc /proc pr ## https://www.debian.org/doc/manuals/securing-debian-manual/ch04s10.en.html /dev/cdrom /mnt/cdrom iso9660 nofail,ro,users,nodev,nosuid,noexec 0 0 -/boot /boot none nofail,bind,remount,nosuid,nodev,noexec 0 0 +/boot /boot none nofail,bind,nosuid,nodev,noexec 0 0 ## noexec optional -/tmp /tmp tmpfs nofail,bind,remount,nosuid,nodev,noexec 0 0 +/tmp /tmp tmpfs nofail,bind,nosuid,nodev,noexec 0 0 -/var /var none nofail,bind,remount,nosuid,nodev 0 0 +/var /var none nofail,bind,nosuid,nodev 0 0 ## noexec optional -/var/tmp /var/tmp none nofail,bind,remount,nosuid,nodev,noexec 0 0 +/var/tmp /var/tmp none nofail,bind,nosuid,nodev,noexec 0 0 -/var/log /var/log none nofail,bind,remount,nosuid,nodev,noexec 0 0 +/var/log /var/log none nofail,bind,nosuid,nodev,noexec 0 0 ## noexec optional -/run /run none nofail,bind,remount,nosuid,nodev,noexec 0 0 +/run /run none nofail,bind,nosuid,nodev,noexec 0 0 ## noexec optional -/home /home none nofail,bind,remount,nosuid,nodev,noexec 0 0 +/home /home none nofail,bind,nosuid,nodev,noexec 0 0