Jiahao XU
ccec63104c
Update default MOUNT_OPTIONS beesd.in
...
`noatime` to avoid updating atime;
`nodev,noexec,nosuid` for the pedantic.
2021-10-04 20:19:00 -04:00
Jiahao XU
951b5ce360
Fix typo when setting default val of MOUNT_OPTIONS in beesd.in
...
Fixed mistake in #188
2021-10-04 20:18:55 -04:00
Jiahao XU
f2c65f2f4b
Update comment in beesd@.service.in
...
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com >
2021-09-04 21:20:05 +10:00
Jiahao XU
c79eb1d704
Further sandbox beesd using systemd.exec options
...
I've verified that using this setup, user will be able to access the log
in /run/bees, but cannot access the mounted filesystem.
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com >
2021-09-04 17:40:13 +10:00
Jiahao XU
4a3d3e7a43
Modify systemd unit and beesd.in to use private mnt namespace
...
to:
- avoid influencing the global mount namespace
- auto umount upon exit of this unit
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com >
2021-08-30 18:23:38 -04:00
Jiahao XU
13abf8aada
Add new options MOUNT_OPTIONS
...
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com >
[trailing whitespace deleted]
Signed-off-by: Zygo Blaxell <bees@furryterror.org >
2021-08-30 18:22:30 -04:00
Jiahao XU