You are not logged in.
Pages: 1
I uses the last (linux 3.3.1-1) kernel, and I would like use the new "hidepid" option at boot time.
My fstab looks like:
devpts /dev/pts devpts defaults 0 0
shm /dev/shm tmpfs nodev,nosuid 0 0
/dev/sda1 /boot ext2 defaults 0 1
/dev/sda2 swap swap defaults 0 0
/dev/sda3 / ext4 defaults,acl 0 1
tmpfs /tmp tmpfs nodev,nosuid 0 0I tried append the /etc/rc.sysinit of line 16:
mountpoint -q /proc || mount -t proc proc /proc -o nosuid,noexec,nodev,hidepid=1but when I rebooted my computer, this option doesn't show up.
Where I can write the "hidepid=1" option?
Offline
That sysinit line checks if proc is already mounted, and mounts it if it's not. Thing is, it was already mounted in early userspace.
So add the hidepid option to /usr/lib/initcpio/init instead, and then regenerate your initramfs image.
Offline
Thing is, it was already mounted in early userspace.
Probably you are right.
I added the "hidepid=1" option to /usr/lib/initcpio/init file, and I regenerate my initramfs image with
mkinitcpio -p linuxcommand. After that I read the
/boot/initramfs-linux.img and I found that option.
But, after reboot this option missing:
mount | grep proc
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)I don't understand too why has a relatime option, because not in /usr/lib/initcpio/init file.
Last edited by Goosfrabaa (2012-04-12 10:11:52)
Offline
Uhh.... who's James? ![]()
Offline
Sorry, I edited ![]()
(Otherwise James stem from https://bbs.archlinux.org/help.php#bbcode)
Last edited by Goosfrabaa (2012-04-12 10:15:54)
Offline
Finally I used an ugly (but well functioning) solution.
I edited the /etc/rc.sysinit file:
mountpoint -q /proc && mount /proc -o remount,hidepid=1 || mount -t proc proc /proc -o nosuid,noexec,nodev,hidepid=1I don't know what whould be the right solution, but it is working (until doesn't came a new initscripts package).
Last edited by Goosfrabaa (2012-04-12 20:01:56)
Offline
Pages: 1