[PATCH] Core Update 170: Harden mount options of /boot on existing installations

Signed-off-by: Peter Müller peter.mueller@ipfire.org --- config/rootfiles/core/170/update.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/config/rootfiles/core/170/update.sh b/config/rootfiles/core/170/update.sh index 8edb5ff2e..c9744f5f5 100644 --- a/config/rootfiles/core/170/update.sh +++ b/config/rootfiles/core/170/update.sh @@ -49,8 +49,11 @@ ldconfig

# Start services

+# Harden mount options of /boot +sed -e -i "s/[[:space:]]*/boot[[:space:]]*auto[[:space:]]*defaults[[:space:]]*/ /boot auto defaults,nodev,noexec,nosuid /g" /etc/fstab + # This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot

# Finish /etc/init.d/fireinfo start