mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-21 05:10:41 +07:00
Code Issues Packages Projects Releases Wiki Activity

improve

Browse Source
This commit is contained in:
Patrick Schleizer
2023-10-22 14:44:58 -04:00
parent 7c0ea4324a
commit c85db586ca
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
usr/bin/remount-secure
View File

@ -188,6 +188,18 @@ _var_tmp() {
remount_secure "$@" remount_secure "$@"
} }
_var_log() {
mount_folder="/var/log"
intended_mount_options="nosuid,nodev,noexec"
remount_secure "$@"
}
_var_log_audit() {
mount_folder="/var/log/audit"
intended_mount_options="nosuid,nodev,noexec"
remount_secure "$@"
}
## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25 ## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
_lib() { _lib() {
## TODO: NEWROOT? ## TODO: NEWROOT?
@ -230,6 +242,10 @@ main() {
_var_tmp "$@" _var_tmp "$@"
## TODO: ?
#_var_log
#_var_log_audit
## TODO: broken? ## TODO: broken?
#_lib "$@" #_lib "$@"