Merge branch 'dnschneid:master' into master

dnschneid · May 16, 2024 · de430b4 · de430b4
2 parents 8384f3a + 1056cdd
commit de430b4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/host-bin/mount-chroot b/host-bin/mount-chroot
@@ -69,6 +69,11 @@ whitelist() {
     elif ! mount -n -t securityfs -o nodev,noexec,nosuid securityfs "$sec"; then
         return
     fi
+    # Ensure it's mounted rw
+    if ! mount -o remount,rw "$sec"; then
+        echo "Failed to make inode security policies writeable" >&2
+        return 1
+    fi
     policies="$sec/chromiumos/inode_security_policies"
     if [ -d "$policies" ]; then
         for policy in "$policies/allow_"*; do