matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[secureboot] only remove exec bit in secureboot

Browse Source 
Address issue #4832
This commit is contained in:
Samuel Angebault 2020-06-23 11:33:44 -07:00
parent 1e81e1da8e
commit f7d43173a2
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
files/initramfs-tools/union-mount.j2
View File

@ -94,11 +94,12 @@ if $secureboot; then
else else
allowlist_file=${rootmnt}/host/$image_dir/allowlist_paths.conf allowlist_file=${rootmnt}/host/$image_dir/allowlist_paths.conf
fi fi
remove_not_in_allowlist_files "$allowlist_file" "$rw_dir"
fi
## Remove the executable permission for all the files in rw folder except home folder remove_not_in_allowlist_files "$allowlist_file" "$rw_dir"
find ${rw_dir} -type f -not -path ${rw_dir}/home -exec chmod a-x {} +
## Remove the executable permission for all the files in rw folder except home folder
find ${rw_dir} -type f -not -path ${rw_dir}/home -exec chmod a-x {} +
fi
mount -n -o lowerdir=${rootmnt},upperdir=${rw_dir},workdir=${work_dir} -t overlay root-overlay ${rootmnt} mount -n -o lowerdir=${rootmnt},upperdir=${rw_dir},workdir=${work_dir} -t overlay root-overlay ${rootmnt}