From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH] installer: Harden mount options of /boot partition Date: Thu, 28 Jul 2022 13:28:42 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3416473668567626128==" List-Id: --===============3416473668567626128== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Signed-off-by: Peter M=C3=BCller --- src/installer/hw.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/installer/hw.c b/src/installer/hw.c index 12f8e793d..0ed6050b3 100644 --- a/src/installer/hw.c +++ b/src/installer/hw.c @@ -1,7 +1,7 @@ /*##########################################################################= ### # = # # IPFire - An Open Source Firewall Distribution = # -# Copyright (C) 2014 IPFire development team = # +# Copyright (C) 2007-2022 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -1134,7 +1134,7 @@ int hw_write_fstab(struct hw_destination* dest) { uuid =3D hw_get_uuid(dest->part_boot); =20 if (uuid) { - fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults", 1, 2); + fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults,nodev,noexec,nosui= d", 1, 2); free(uuid); } } --=20 2.35.3 --===============3416473668567626128==--