Base: Mark all mounts in /etc/fstab as immutable

These mounts are the base set of mounts we need for a fully functional
system. The bind mounts are also there for protection from malicious
software or accidental overwrite/deletion of files.

Therefore, marking these mounts as immutable makes sense, because they
should not be changed during runtime anyway.
This commit is contained in:
Liav A. authored and Sönke Holz committed 2024-12-23 20:38:38 +01:00
1 parent 1dfc9e2df3
commit 439428b464
1 file changed
+10 -10
+10 -10
View File
@@ -1,14 +1,14 @@
# Root file system. This is a fake entry which gets ignored by `mount -a`;
# the actual logic for mounting root is in the kernel.
/dev/hda / ext2 nodev,nosuid,ro
/dev/hda / ext2 immutable,nodev,nosuid,ro
# Remount /bin, /root, and /home while adding the appropriate permissions.
/bin /bin bind bind,nodev,ro
/etc /etc bind bind,nodev,nosuid
/home /home bind bind,nodev,nosuid
/root /root bind bind,nodev,nosuid
/var /var bind bind,nodev,nosuid
/www /www bind bind,nodev,nosuid
/usr/Tests /usr/Tests bind bind,nodev,ro
/usr/local /usr/local bind bind,nodev,nosuid
/usr/Ports /usr/Ports bind bind,nodev,nosuid
/bin /bin bind immutable,bind,nodev,ro
/etc /etc bind immutable,bind,nodev,nosuid
/home /home bind immutable,bind,nodev,nosuid
/root /root bind immutable,bind,nodev,nosuid
/var /var bind immutable,bind,nodev,nosuid
/www /www bind immutable,bind,nodev,nosuid
/usr/Tests /usr/Tests bind immutable,bind,nodev,ro
/usr/local /usr/local bind immutable,bind,nodev,nosuid
/usr/Ports /usr/Ports bind immutable,bind,nodev,nosuid