From: Peter Müller Date: Thu, 28 Jul 2022 13:28:42 +0000 (+0000) Subject: installer: Harden mount options of /boot partition X-Git-Tag: v2.27-core170~4^2~109 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e404dab5e42db7fa47695e1b4a50365e18be0e10;p=ipfire-2.x.git installer: Harden mount options of /boot partition Signed-off-by: Peter Müller --- diff --git a/src/installer/hw.c b/src/installer/hw.c index 12f8e793de..0ed6050b30 100644 --- a/src/installer/hw.c +++ b/src/installer/hw.c @@ -1,7 +1,7 @@ /*############################################################################# # # # IPFire - An Open Source Firewall Distribution # -# Copyright (C) 2014 IPFire development team # +# Copyright (C) 2007-2022 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -1134,7 +1134,7 @@ int hw_write_fstab(struct hw_destination* dest) { uuid = hw_get_uuid(dest->part_boot); if (uuid) { - fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults", 1, 2); + fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults,nodev,noexec,nosuid", 1, 2); free(uuid); } }