mirror/webgui
1
0
Fork 0
mirror of https://github.com/unraid/webgui.git synced 2026-04-22 10:08:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update cgroup2 mount

Browse Source 
- Remove tmpfs for cgroup2 mount
- Change source from `none` to `cgroup2`
- Add mount options nosuid, nodev, noexec, relatime, nsdelegate, memory_recursiveprot for more security
This commit is contained in:
Christoph Hummer
2024-02-07 14:01:35 +01:00
committed by GitHub
parent 006c59dbf1
commit 6011658a43
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
etc/rc.d/rc.S.cont
+4 -5
View File
@@ -67,12 +67,11 @@ if /bin/grep -wq cgroup /proc/filesystems; then
else
if [[ -d /sys/fs/cgroup ]]; then
# See https://docs.kernel.org/admin-guide/cgroup-v2.html (section Mounting)
# Mount a tmpfs as the cgroup2 filesystem root
/sbin/mount -t tmpfs -o mode=0755,size=8M cgroup_root /sys/fs/cgroup
/sbin/mount -t cgroup2 none /sys/fs/cgroup
# Mount cgroup2 filesystem
mount -t cgroup2 -o rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot cgroup2 /sys/fs/cgroup
else
/bin/mkdir -p /dev/cgroup
/sbin/mount -t cgroup2 none /dev/cgroup
# Display message if /sys/fs/cgroup does not exist
echo "/sys/fs/cgroup does not exist. cgroup2 cannot be mounted."
fi
fi
fi