Bug#924526: Support FSProtect on NFS

Ivan Baldo ibaldo at adinet.com.uy
Wed Mar 20 23:44:10 GMT 2019


     Not using fsprotect anymore.

     Maybe we should close this report then?

     Thanks!


El 14/3/19 a las 02:01, Pierre Ynard escribió:
> submitter 924526 Ivan Baldo <ibaldo at adinet.com.uy>
> thanks
>
> Hello,
>
>>    In umountnfs.sh where it says
>> /|/proc|/dev|/dev/pts|/dev/shm|/proc/*|/sys|/lib/init/rw) should add
>> /fsprotect/system because thats the underlying root FS when using
>> fsprotect with NFS.
>>    fsprotect is a package in Debian and should be supported.
> First, if I understand correctly, fsprotect is in itself related neither
> to NFS, nor to network filesystems, nor to FUSE.
>
> What is the problem that you encounter exactly? Can you share the
> contents of /proc/mounts on your system?
>
> It is my understanding that /fsprotect/system is a mount point
> for the underlying filesystem which, combined with a tmpfs in an
> aufs, is mounted as the root. What happens if you try to unmount
> /fsprotect/system while the aufs is still mounted? Is that even
> possible, with umount, with umount -f?
>
> I suspect that in /etc/init.d/umountfs, /fsprotect/system is protected
> from unmounting because it is listed before / in /proc/mounts;
> however there is no such logic in /etc/init.d/umountnfs.sh, so if
> /fsprotect/system is a network mount it would try to unmount it while
> the aufs / is still mounted.
>
> If that's the case, I'm not convinced that adding /fsprotect/system in
> the list is the right approach, that would be a very specific fix.
>
-- 
Ivan Baldo - ibaldo at adinet.com.uy - http://ibaldo.codigolibre.net/
Freelance C++/PHP programmer and GNU/Linux systems administrator.
The sky is not the limit!




More information about the Debian-init-diversity mailing list