[patch] Patch to /etc/init.d/localmount to remount read-only bind-mounts

ro-bind-mount.patch (text/plain), 830 bytes, created by Max Hacking on 2011-05-31 13:34:45 UTC

--- etc/init.d/localmount	2011-05-15 05:29:03.000000000 +0200
+++ /etc/init.d/localmount	2011-05-31 15:08:00.000000000 +0200
@@ -24,9 +24,26 @@
 		no_netdev="-O no_netdev"
 	fi
 	ebegin "Mounting local filesystems"
-	mount -at "$types" $no_netdev
+	mount -at "$types" $no_netdev >/dev/null
 	eend $? "Some local filesystem failed to mount"
 
+	# Remount any read-only bind-mounts so that they actually become read-only!
+	for m in `awk '/^\//   {
+		split($4,opts,",");
+		bm = ro = na = 0;
+		for (i in opts)
+		{
+			ro = ro || (opts[i] == "ro");
+			bm = bm || ((opts[i] == "bind") || (opts[i] == "rbind"));
+			na = na || (opts[i] == "noauto");
+		}
+		if (bm && ro && !na)
+			print $2;
+		}' /etc/fstab`
+	do
+		mount -o remount $m
+	done
+
 	# Always return 0 - some local mounts may not be critical for boot
 	return 0
 }