ryan77627/guix
1
0
Fork 0
mirror of https://git.in.rschanz.org/ryan77627/guix.git synced 2024-12-26 06:18:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

linux-boot: Ensure volatile root is mounted read-only.

Browse source 
* gnu/build/linux-boot.scm (mount-root-file-system): Ensure MS_RDONLY is
present among the root file system flags when VOLATILE-ROOT? is #t.
This commit is contained in:
Maxim Cournoyer 2020-02-11 12:57:29 -05:00
parent 754c12041d
commit cc9b889e8f
No known key found for this signature in database
GPG key ID: 1260E46482E63562
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
gnu/build/linux-boot.scm
View file

@ -362,12 +362,12 @@ (define* (mount-root-file-system root type
"Mount the root file system of type TYPE at device ROOT. If VOLATILE-ROOT? is "Mount the root file system of type TYPE at device ROOT. If VOLATILE-ROOT? is
true, mount ROOT read-only and make it an overlay with a writable tmpfs using true, mount ROOT read-only and make it an overlay with a writable tmpfs using
the kernel built-in overlayfs. FLAGS and OPTIONS indicates the options to use the kernel built-in overlayfs. FLAGS and OPTIONS indicates the options to use
to mount ROOT." to mount ROOT, and behave the same as for the `mount' procedure."
(if volatile-root? (if volatile-root?
(begin (begin
(mkdir-p "/real-root") (mkdir-p "/real-root")
(mount root "/real-root" type MS_RDONLY options) (mount root "/real-root" type (logior MS_RDONLY flags) options)
(mkdir-p "/rw-root") (mkdir-p "/rw-root")
(mount "none" "/rw-root" "tmpfs") (mount "none" "/rw-root" "tmpfs")