tom/bees
1
0
Fork 0
Mirror von https://github.com/tkuschel/bees.git synchronisiert 2026-08-31 13:48:11 +02:00
Code Probleme Pakete Projekte Releases Wiki Aktivität
544 Commits 4 Branches 0 Tags
14ce81c081e2aa3104e78bb74a54ecccd4624d0d
Commit graph
7 Commits
Dieser Branch
Dieser Branch
Alle Branches
Autor SHA1 Nachricht Datum
Jiahao XU 69c3d99552 Rm MOUNT_OPTIONS for it is of no use and dangerous 
Btrfs mount options effects all mount points using the same Btrfs
partition, so specifing it per-mount is useless.

Also, common mount options like `noatime,nosuid,nodev,noexec` has little
to no effect on beesd, so it's just better and simpler to remove this.

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
 2021-10-04 20:19:00 -04:00
Jiahao XU ccec63104c Update default MOUNT_OPTIONS beesd.in 
`noatime` to avoid updating atime;
`nodev,noexec,nosuid` for the pedantic.
 2021-10-04 20:19:00 -04:00
Jiahao XU 951b5ce360 Fix typo when setting default val of MOUNT_OPTIONS in beesd.in 
Fixed mistake in #188
 2021-10-04 20:18:55 -04:00
Jiahao XU f2c65f2f4b Update comment in beesd@.service.in 
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
 2021-09-04 21:20:05 +10:00
Jiahao XU c79eb1d704 Further sandbox beesd using systemd.exec options 
I've verified that using this setup, user will be able to access the log
in /run/bees, but cannot access the mounted filesystem.

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
 2021-09-04 17:40:13 +10:00
Jiahao XU 4a3d3e7a43 Modify systemd unit and beesd.in to use private mnt namespace 
to:
 - avoid influencing the global mount namespace
 - auto umount upon exit of this unit

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
 2021-08-30 18:23:38 -04:00
Jiahao XU 13abf8aada Add new options MOUNT_OPTIONS 
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
[trailing whitespace deleted]
Signed-off-by: Zygo Blaxell <bees@furryterror.org>
 2021-08-30 18:22:30 -04:00