Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-02 11:06:04 -04:00
Code Issues Projects Releases Packages Wiki Activity

usrmerge

Browse source 
https://github.com/Kicksecure/security-misc/issues/157
This commit is contained in:
Patrick Schleizer 2023-12-25 09:27:45 -05:00
parent 269fada14a
commit b0dd967611
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 0 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

11
usr/bin/remount-secure
View file

@ -255,17 +255,6 @@ _var() {
remount_secure
}
_lib() {
mount_folder="$NEWROOT/lib"
## Cannot use noexec on /lib as per:
## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
## There are many executables in /lib. To check:
## sudo find /var/lib -type f -executable
## sudo find /var/lib -type f -executable ! -type l
intended_mount_options="nosuid,nodev"
remount_secure
}
_home() {
mount_folder="$NEWROOT/home"
intended_mount_options="nosuid,nodev${home_noexec_maybe}"