diff options
| author | Luca Boccassi <bluca@debian.org> | 2023-04-06 13:19:22 +0200 |
|---|---|---|
| committer | Mike Yuan <me@yhndnzj.com> | 2023-04-13 19:21:48 +0200 |
| commit | 0607a9f9da628deed420a811852d3b506a0efc2d (patch) | |
| tree | 04e3d4f79e6b1ac845c7d6c623f595cc4f4033ee /.clusterfuzzlite | |
| parent | mkosi: Update to latest (diff) | |
| download | systemd-0607a9f9da628deed420a811852d3b506a0efc2d.tar.xz systemd-0607a9f9da628deed420a811852d3b506a0efc2d.zip | |
systemd-confext: mount confexts as noexec and nosuid
Confexts should not contain code, so mount confexts with noexec.
We cannot mount invidial extensions as noexec, as the overlay ignores
it and bypasses it, we need to use the flag on the whole overlay for
it to be effective.
But given there are legacy scripts still shipped in /etc, allow to
override it with --noexec=false.
Diffstat (limited to '.clusterfuzzlite')
0 files changed, 0 insertions, 0 deletions