[Fai-commit] r3578 - in trunk: bin debian
fai-commit at lists.alioth.debian.org
fai-commit at lists.alioth.debian.org
Thu Jul 20 16:44:17 UTC 2006
Author: lange
Date: 2006-07-20 16:44:16 +0000 (Thu, 20 Jul 2006)
New Revision: 3578
Modified:
trunk/bin/setup_harddisks
trunk/debian/changelog
Log:
change options of /proc mount entry in fstab to rw,nosuid,noexec
Modified: trunk/bin/setup_harddisks
===================================================================
--- trunk/bin/setup_harddisks 2006-07-20 16:33:16 UTC (rev 3577)
+++ trunk/bin/setup_harddisks 2006-07-20 16:44:16 UTC (rev 3578)
@@ -152,7 +152,7 @@
# Variables
#****************************************************
-my $Version = "version 0.38fai";
+my $Version = "version 0.39fai";
my $megabyte = 1024 * 1024; # guess
# $gigabyte = 1024 * $megabyte;
@@ -901,7 +901,7 @@
"none","swap",$MPfstaboptions{$mountpoint},0,0);
}
# 3. /proc
- $FileSystemTab .= BuildfstabLine("none","/proc","proc","defaults",0,0);
+ $FileSystemTab .= BuildfstabLine("none","/proc","proc","rw,nosuid,noexec",0,0);
# 4. sorted others
foreach my $mountpoint (sort %PartMountpoint){
next if ( ($mountpoint !~ m#^/#) || ($mountpoint eq "/"));
Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog 2006-07-20 16:33:16 UTC (rev 3577)
+++ trunk/debian/changelog 2006-07-20 16:44:16 UTC (rev 3578)
@@ -6,6 +6,7 @@
* use /srv/fai/config instead of /usr/local/share/fai
* use /srv/fai/nfsroot instead of /usr/lib/fai/nfsroot
* create_ramdisk: call mkrw with -n
+ * setup_harddisks: use more secure options for /proc line
-- Thomas Lange <lange at debian.org> Thu, 20 Jul 2006 13:32:02 +0200
More information about the Fai-commit
mailing list