summaryrefslogtreecommitdiffstats
path: root/debian/patches/progress-linux
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 15:36:56 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 15:36:56 +0000
commit49f8c30d0babb4b9da77993decab24d82c520912 (patch)
tree45a0fc799cbf4fd9ee84188b49f8317ed703da54 /debian/patches/progress-linux
parentStarting agetty with --nohostname option. (diff)
downloadsystemd-49f8c30d0babb4b9da77993decab24d82c520912.tar.xz
systemd-49f8c30d0babb4b9da77993decab24d82c520912.zip
Mounting /proc with hidepid=2 option.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches/progress-linux')
-rw-r--r--debian/patches/progress-linux/0002-proc-hidepid.patch27
1 files changed, 27 insertions, 0 deletions
diff --git a/debian/patches/progress-linux/0002-proc-hidepid.patch b/debian/patches/progress-linux/0002-proc-hidepid.patch
new file mode 100644
index 0000000..2b74268
--- /dev/null
+++ b/debian/patches/progress-linux/0002-proc-hidepid.patch
@@ -0,0 +1,27 @@
+Author: Daniel Baumann <daniel.baumann@progress-linux.org>
+Description: Mounting /proc with hidepid=2 option.
+
+diff -Naurp systemd.orig/src/nspawn/nspawn-mount.c systemd/src/nspawn/nspawn-mount.c
+--- systemd.orig/src/nspawn/nspawn-mount.c
++++ systemd/src/nspawn/nspawn-mount.c
+@@ -513,7 +513,7 @@ int mount_all(const char *dest,
+
+ static const MountPoint mount_table[] = {
+ /* First we list inner child mounts (i.e. mounts applied *after* entering user namespacing) */
+- { "proc", "/proc", "proc", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV,
++ { "proc", "/proc", "proc", "hidepid=2", MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ MOUNT_FATAL|MOUNT_IN_USERNS|MOUNT_MKDIR|MOUNT_FOLLOW_SYMLINKS }, /* we follow symlinks here since not following them requires /proc/ already being mounted, which we don't have here. */
+
+ { "/proc/sys", "/proc/sys", NULL, NULL, MS_BIND,
+diff -Naurp systemd.orig/src/shared/mount-setup.c systemd/src/shared/mount-setup.c
+--- systemd.orig/src/shared/mount-setup.c
++++ systemd/src/shared/mount-setup.c
+@@ -62,7 +62,7 @@ typedef struct MountPoint {
+ #endif
+
+ static const MountPoint mount_table[] = {
+- { "proc", "/proc", "proc", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV,
++ { "proc", "/proc", "proc", "hidepid=2", MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ NULL, MNT_FATAL|MNT_IN_CONTAINER|MNT_FOLLOW_SYMLINK },
+ { "sysfs", "/sys", "sysfs", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV,
+ NULL, MNT_FATAL|MNT_IN_CONTAINER },