installer: Harden mount options of /boot partition

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/src/installer/hw.c b/src/installer/hw.c
index 12f8e793de49b65afb4d271f10d6d7717e8a8145..0ed6050b30b9e3ddb49893973c1f038966a7e582 100644 (file)
--- a/src/installer/hw.c
+++ b/src/installer/hw.c
@@ -1,7 +1,7 @@
 /*#############################################################################
 #                                                                             #
 # IPFire - An Open Source Firewall Distribution                               #
-# Copyright (C) 2014 IPFire development team                                  #
+# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -1134,7 +1134,7 @@ int hw_write_fstab(struct hw_destination* dest) {
                uuid = hw_get_uuid(dest->part_boot);
 
                if (uuid) {
-                       fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults", 1, 2);
+                       fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults,nodev,noexec,nosuid", 1, 2);
                        free(uuid);
                }
        }