Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-07 16:32:41 -04:00
Code Issues Projects Releases Packages Wiki Activity

remount-secure: stricter error handling

Browse source
This commit is contained in:
Patrick Schleizer 2023-10-22 06:23:48 -04:00
parent 59a5fea25d
commit abc3592734
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
usr/libexec/security-misc/remount-secure
View file

@ -10,11 +10,14 @@
set -x set -x
set -e set -e
set -o pipefail
set -o nounset
if [ -f /usr/libexec/helper-scripts/pre.bsh ]; then if [ -f /usr/libexec/helper-scripts/pre.bsh ]; then
## pre.bsh would `source` the following folders: ## pre.bsh would `source` the following folders:
## /etc/remount-secure_pre.d/*.conf ## /etc/remount-secure_pre.d/*.conf
## /usr/local/etc/remount-secure_pre.d/*.conf ## /usr/local/etc/remount-secure_pre.d/*.conf
# shellcheck disable=SC1091
source /usr/libexec/helper-scripts/pre.bsh source /usr/libexec/helper-scripts/pre.bsh
fi fi
@ -37,10 +40,15 @@ fi
mkdir --parents "/var/run/remount-secure" mkdir --parents "/var/run/remount-secure"
[[ -v noexec ]] || noexec=""
[[ -v noexec_maybe ]] || noexec_maybe=""
if [ "$noexec" = "true" ]; then if [ "$noexec" = "true" ]; then
noexec_maybe=",noexec" noexec_maybe=",noexec"
fi fi
command -v str_replace >/dev/null
exit_code=0 exit_code=0
mount_output="$(mount)" mount_output="$(mount)"
@ -55,7 +63,7 @@ remount_secure() {
## example status_file_full_path: ## example status_file_full_path:
## /var/run/remount-secure/_home ## /var/run/remount-secure/_home
## LANG=C str_replace is provided by package helper-scripts. ## str_replace is provided by package helper-scripts.
mount_folder="$(echo "${status_file_name}" | LANG=C str_replace "_" "/")" mount_folder="$(echo "${status_file_name}" | LANG=C str_replace "_" "/")"
## example mount_folder: ## example mount_folder:
## /home ## /home