[Fai-commit] r3578 - in trunk: bin debian

[fai-commit at lists.alioth.debian.org]

Author: lange
Date: 2006-07-20 16:44:16 +0000 (Thu, 20 Jul 2006)
New Revision: 3578

Modified:
   trunk/bin/setup_harddisks
   trunk/debian/changelog
Log:
change options of /proc mount entry in fstab to rw,nosuid,noexec


Modified: trunk/bin/setup_harddisks
===================================================================
--- trunk/bin/setup_harddisks	2006-07-20 16:33:16 UTC (rev 3577)
+++ trunk/bin/setup_harddisks	2006-07-20 16:44:16 UTC (rev 3578)
@@ -152,7 +152,7 @@
 # Variables
 #****************************************************
 
-my $Version = "version 0.38fai";
+my $Version = "version 0.39fai";
 
 my $megabyte = 1024 * 1024;    # guess
 # $gigabyte = 1024 * $megabyte;
@@ -901,7 +901,7 @@
                            "none","swap",$MPfstaboptions{$mountpoint},0,0);
     }
     # 3. /proc
-    $FileSystemTab .= BuildfstabLine("none","/proc","proc","defaults",0,0);
+    $FileSystemTab .= BuildfstabLine("none","/proc","proc","rw,nosuid,noexec",0,0);
     # 4. sorted others
     foreach my $mountpoint (sort %PartMountpoint){
 	next if ( ($mountpoint !~ m#^/#) || ($mountpoint eq "/"));

Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2006-07-20 16:33:16 UTC (rev 3577)
+++ trunk/debian/changelog	2006-07-20 16:44:16 UTC (rev 3578)
@@ -6,6 +6,7 @@
   * use /srv/fai/config  instead of /usr/local/share/fai
   * use /srv/fai/nfsroot instead of /usr/lib/fai/nfsroot
   * create_ramdisk: call mkrw with -n
+  * setup_harddisks: use more secure options for /proc line
 
  -- Thomas Lange <lange at debian.org>  Thu, 20 Jul 2006 13:32:02 +0200