From: Luca Boccassi <luca.boccassi@microsoft.com>
Date: Thu, 22 Jul 2021 21:21:10 +0000 (+0100)
Subject: discover-image: mount as read-only when extracting metadata
X-Git-Tag: v250-rc1~925
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f6f4ec7951f429e8a470f8912cbeacde8fa1206e;p=thirdparty%2Fsystemd.git

discover-image: mount as read-only when extracting metadata

We don't need to modify the image, and the loopback device is already set to read-only.
---

diff --git a/src/shared/discover-image.c b/src/shared/discover-image.c
index 5c833afc788..521264ec29b 100644
--- a/src/shared/discover-image.c
+++ b/src/shared/discover-image.c
@@ -1208,6 +1208,7 @@ int image_read_metadata(Image *i) {
                                 DISSECT_IMAGE_GENERIC_ROOT |
                                 DISSECT_IMAGE_REQUIRE_ROOT |
                                 DISSECT_IMAGE_RELAX_VAR_CHECK |
+                                DISSECT_IMAGE_READ_ONLY |
                                 DISSECT_IMAGE_USR_NO_ROOT,
                                 &m);
                 if (r < 0)