Merge pull request #8294 from fsateler/debian-patches

Upstreaming some debian patches
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2018-02-28 09:10:16 +01:00 committed by GitHub
commit bdad9e44e4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 0 deletions

View File

@ -148,6 +148,12 @@ static const MountEntry protect_system_yes_table[] = {
{ "/usr", READONLY, false },
{ "/boot", READONLY, true },
{ "/efi", READONLY, true },
#if HAVE_SPLIT_USR
{ "/lib", READONLY, true },
{ "/lib64", READONLY, true },
{ "/bin", READONLY, true },
{ "/sbin", READONLY, true },
#endif
};
/* ProtectSystem=full includes ProtectSystem=yes */
@ -156,6 +162,12 @@ static const MountEntry protect_system_full_table[] = {
{ "/boot", READONLY, true },
{ "/efi", READONLY, true },
{ "/etc", READONLY, false },
#if HAVE_SPLIT_USR
{ "/lib", READONLY, true },
{ "/lib64", READONLY, true },
{ "/bin", READONLY, true },
{ "/sbin", READONLY, true },
#endif
};
/*

View File

@ -1,3 +1,6 @@
# see udev.conf(5) for details
#
# udevd is also started in the initrd. When this file is modified you might
# also want to rebuild the initrd, so that it will include the modified configuration.
#udev_log="info"