mirror of
https://github.com/armbian/build.git
synced 2025-08-09 04:36:58 +02:00
ramlog: harden the zram mounting
this is to improve the score of /var/log for FILE-6374 in Lynis audit
This commit is contained in:
parent
5e008a8f9b
commit
4df3bddd64
@ -126,7 +126,7 @@ case "$1" in
|
|||||||
case $LOG_TYPE in
|
case $LOG_TYPE in
|
||||||
zram)
|
zram)
|
||||||
echo -e "Mounting $rd as $RAM_LOG \c" | $LOG_OUTPUT
|
echo -e "Mounting $rd as $RAM_LOG \c" | $LOG_OUTPUT
|
||||||
mount -o discard $rd $RAM_LOG 2>&1 | $LOG_OUTPUT
|
mount -o discard,nosuid,noexec,nodev $rd $RAM_LOG 2>&1 | $LOG_OUTPUT
|
||||||
;;
|
;;
|
||||||
tmpfs)
|
tmpfs)
|
||||||
echo -e "Setting up $RAM_LOG as tmpfs \c" | $LOG_OUTPUT
|
echo -e "Setting up $RAM_LOG as tmpfs \c" | $LOG_OUTPUT
|
||||||
|
Loading…
Reference in New Issue
Block a user