ramlog: harden the zram mounting

this is to improve the score of /var/log for FILE-6374 in Lynis audit
This commit is contained in:
Antony Kurniawan 2024-04-09 19:26:31 +00:00 committed by ColorfulRhino
parent 5e008a8f9b
commit 4df3bddd64

View File

@ -126,7 +126,7 @@ case "$1" in
case $LOG_TYPE in case $LOG_TYPE in
zram) zram)
echo -e "Mounting $rd as $RAM_LOG \c" | $LOG_OUTPUT echo -e "Mounting $rd as $RAM_LOG \c" | $LOG_OUTPUT
mount -o discard $rd $RAM_LOG 2>&1 | $LOG_OUTPUT mount -o discard,nosuid,noexec,nodev $rd $RAM_LOG 2>&1 | $LOG_OUTPUT
;; ;;
tmpfs) tmpfs)
echo -e "Setting up $RAM_LOG as tmpfs \c" | $LOG_OUTPUT echo -e "Setting up $RAM_LOG as tmpfs \c" | $LOG_OUTPUT