Bug#924526: Support FSProtect on NFS

Pierre Ynard linkfanel at yahoo.fr
Thu Mar 14 05:01:05 GMT 2019

submitter 924526 Ivan Baldo <ibaldo at adinet.com.uy>


>   In umountnfs.sh where it says
> /|/proc|/dev|/dev/pts|/dev/shm|/proc/*|/sys|/lib/init/rw) should add
> /fsprotect/system because thats the underlying root FS when using
> fsprotect with NFS.
>   fsprotect is a package in Debian and should be supported.

First, if I understand correctly, fsprotect is in itself related neither
to NFS, nor to network filesystems, nor to FUSE.

What is the problem that you encounter exactly? Can you share the
contents of /proc/mounts on your system?

It is my understanding that /fsprotect/system is a mount point
for the underlying filesystem which, combined with a tmpfs in an
aufs, is mounted as the root. What happens if you try to unmount
/fsprotect/system while the aufs is still mounted? Is that even
possible, with umount, with umount -f?

I suspect that in /etc/init.d/umountfs, /fsprotect/system is protected
from unmounting because it is listed before / in /proc/mounts;
however there is no such logic in /etc/init.d/umountnfs.sh, so if
/fsprotect/system is a network mount it would try to unmount it while
the aufs / is still mounted.

If that's the case, I'm not convinced that adding /fsprotect/system in
the list is the right approach, that would be a very specific fix.

Pierre Ynard

More information about the Debian-init-diversity mailing list