2 files changed, 24 insertions, 0 deletions
diff --git a/modules.d/96securityfs/module-setup.sh b/modules.d/96securityfs/module-setup.sh
new file mode 100755
index 0000000..1181b71
--- /dev/null
+++ b/modules.d/96securityfs/module-setup.sh
@@ -0,0 +1,16 @@
+#!/bin/bash
+
+# called by dracut
+check() {
+    return 255
+}
+
+# called by dracut
+depends() {
+    return 0
+}
+
+# called by dracut
+install() {
+    inst_hook cmdline 60 "$moddir/securityfs.sh"
+}
diff --git a/modules.d/96securityfs/securityfs.sh b/modules.d/96securityfs/securityfs.sh
new file mode 100755
index 0000000..2493c1d
--- /dev/null
+++ b/modules.d/96securityfs/securityfs.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+SECURITYFSDIR="/sys/kernel/security"
+export SECURITYFSDIR
+
+if ! findmnt "${SECURITYFSDIR}" > /dev/null 2>&1; then
+    mount -t securityfs -o nosuid,noexec,nodev securityfs ${SECURITYFSDIR} > /dev/null 2>&1
+fi