diff options
| author | Lennart Poettering <lennart@poettering.net> | 2023-03-07 10:18:09 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2023-03-09 21:56:42 +0100 |
| commit | 254e392e73bd47ebc85b651bc9a91b53e987d1ae (patch) | |
| tree | 1cd40493825d72a6ade6890db7e6cd71748912cd /src/gpt-auto-generator | |
| parent | dissect: add new helper dissected_partition_fstype() (diff) | |
| download | systemd-254e392e73bd47ebc85b651bc9a91b53e987d1ae.tar.xz systemd-254e392e73bd47ebc85b651bc9a91b53e987d1ae.zip | |
dissect-image: set MS_NOSYMFOLLOW for ESP/XBOOTLDR
When we mount a DDI, let's set MS_NOSYMFOLLOW for ESP/XBOOTLDR. They are
generally untrusted territory, (i.e. outside of
encryption/authentication via dm-crypt/dm-verity). Moreover they are
generally FAT, where symlinks don't exist anyway. Let's hence disable
symlinks for them.
This slightly refactors how we put together mount options for mounts,
splitting this out into a new helper call
dissected_partition_pick_options(), which we should be able to reuse
later in gpt-auto-generator, to ensure mounts via loopback as DDI and
those on bare metal get the same options.
Diffstat (limited to 'src/gpt-auto-generator')
0 files changed, 0 insertions, 0 deletions