From f3c360cd6e8daf0431f684bfad9c55f64bad6c7f Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 19 Aug 2024 18:05:16 +0000
Subject: [PATCH] make.sh: Swap mount propagation

When we create the outer mount namespace, we still want to receive any
mounts from the host system which is why we set it to slave.

The second mount namespace should be a copy of the outer one but should not
propagate anything back to the outer mount namespace.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 make.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/make.sh b/make.sh
index c5936a671..8e0154107 100755
--- a/make.sh
+++ b/make.sh
@@ -650,7 +650,7 @@ execute() {
 
 			# Create a new mount namespace
 			"--mount"
-			"--propagation=slave"
+			"--propagation=private"
 
 			# Create a new PID namespace and fork
 			"--pid"
@@ -2150,7 +2150,7 @@ exec_in_namespace() {
 	IN_NAMESPACE=1 \
 	exec unshare \
 		--mount \
-		--propagation=private \
+		--propagation=slave \
 		"${0}" "${args[@]}" "$@"
 }
 
-- 
2.39.5