summaryrefslogtreecommitdiff
path: root/Base/etc
diff options
context:
space:
mode:
authorSergey Bugaev <bugaevc@serenityos.org>2020-05-28 18:06:13 +0300
committerAndreas Kling <kling@serenityos.org>2020-05-29 07:53:30 +0200
commit53647e347f379fd542d8de390d9b3729be31e45a (patch)
tree5786d1a7e2e5c8b28d77ea9df9296d47732bed99 /Base/etc
parent39cde8054561d53c9107459c5535c91acf2db0d2 (diff)
downloadserenity-53647e347f379fd542d8de390d9b3729be31e45a.zip
Kernel+Base: Mount root filesystem read-only :^)
We remount /home and /root as read-write, to keep the ability to modify files there. /tmp remains read-write, as it is mounted from a TmpFS.
Diffstat (limited to 'Base/etc')
-rw-r--r--Base/etc/fstab12
1 files changed, 7 insertions, 5 deletions
diff --git a/Base/etc/fstab b/Base/etc/fstab
index a80aefc78a..4d34ba1d0b 100644
--- a/Base/etc/fstab
+++ b/Base/etc/fstab
@@ -1,10 +1,12 @@
# Root file system. This is a fake entry which gets ignored by `mount -a`;
# the actual logic for mounting root is in the kernel.
-/dev/hda / ext2 nodev,nosuid
-# Remount /bin and /dev while adding the appropriate permissions.
-/dev /dev bind bind,nosuid
-/bin /bin bind bind,nodev
+/dev/hda / ext2 nodev,nosuid,ro
+# Remount /bin, /dev, /root, and /home while adding the appropriate permissions.
+/dev /dev bind bind,nosuid,ro
+/bin /bin bind bind,nodev,ro
+/home /home bind bind,nodev,nosuid
+/root /root bind bind,nodev,nosuid
none /proc proc nosuid
-none /dev/pts devpts noexec,nosuid
+none /dev/pts devpts noexec,nosuid,ro
none /tmp tmp nodev,nosuid