installer: Harden mount options of /boot partition

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
This commit is contained in:
Peter Müller
2022-07-28 13:28:42 +00:00
parent 14909d5fe9
commit e404dab5e4

View File

@@ -1,7 +1,7 @@
/*#############################################################################
# #
# IPFire - An Open Source Firewall Distribution #
# Copyright (C) 2014 IPFire development team #
# Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -1134,7 +1134,7 @@ int hw_write_fstab(struct hw_destination* dest) {
uuid = hw_get_uuid(dest->part_boot);
if (uuid) {
fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults", 1, 2);
fprintf(f, FSTAB_FMT, uuid, "/boot", "auto", "defaults,nodev,noexec,nosuid", 1, 2);
free(uuid);
}
}