This commit is contained in:
Patrick Schleizer 2023-10-22 15:36:16 -04:00
parent ce0babce21
commit f80b5fe376
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -146,7 +146,7 @@ remount_secure() {
_boot() {
mount_folder="$NEWROOT/boot"
## https://lists.freedesktop.org/archives/systemd-devel/2015-February/028456.html
intended_mount_options="nosuid,nodev${noexec_maybe}"
intended_mount_options="nosuid,nodev,noexec"
remount_secure "$@"
}
@ -199,7 +199,7 @@ _var_log() {
_lib() {
mount_folder="$NEWROOT/lib"
## Not using noexec on /lib.
## Cannot use noexec on /lib as per:
## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
intended_mount_options="nosuid,nodev"
remount_secure "$@"