Bug#440709: patch: mount securityfs when it is available (Closes: #440709)

[Dmitry Bogatov]

control: tags 440709 +patch +pending

Here I refreshed patch:

From efedf38621a2a63fd193f1fa740c3a97ae8bee26 Mon Sep 17 00:00:00 2001
From: Dmitry Bogatov <KAction at debian.org>
Date: Mon, 13 May 2019 15:18:41 +0000
Subject: [PATCH] Mount securityfs when it is available (Closes: #440709)

Thanks: Ritesh Raj Sarraf <rrs at debian.org>
---
 debian/src/initscripts/etc/init.d/mountkernfs.sh | 4 ++++
 debian/src/initscripts/etc/init.d/umountfs       | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/debian/src/initscripts/etc/init.d/mountkernfs.sh b/debian/src/initscripts/etc/init.d/mountkernfs.sh
index e95cac3a..8f2b20a8 100755
--- a/debian/src/initscripts/etc/init.d/mountkernfs.sh
+++ b/debian/src/initscripts/etc/init.d/mountkernfs.sh
@@ -34,6 +34,10 @@ mount_filesystems () {
 	#
 	domount "$MNTMODE" proc "" /proc proc "-onodev,noexec,nosuid"
 
+	if grep -E -qs "securityfs\$" /proc/filesystems ; then
+		domount securityfs "" /sys/kernel/security securityfs
+	fi
+
 	#
 	# Mount sysfs on /sys
 	#
diff --git a/debian/src/initscripts/etc/init.d/umountfs b/debian/src/initscripts/etc/init.d/umountfs
index 633a3f6d..126e7aab 100755
--- a/debian/src/initscripts/etc/init.d/umountfs
+++ b/debian/src/initscripts/etc/init.d/umountfs
@@ -30,7 +30,7 @@ do_stop () {
 			;;
 		esac
 		case "$FSTYPE" in
-		  proc|procfs|linprocfs|sysfs|usbfs|usbdevfs|devpts)
+		  proc|procfs|linprocfs|sysfs|securityfs|usbfs|usbdevfs|devpts)
 			continue
 			;;
 		  tmpfs)
-- 
        Note, that I send and fetch email in batch, once every 24 hours.
                 If matter is urgent, try https://t.me/kaction
                                                                             --
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://www.chiark.greenend.org.uk/pipermail/debian-init-diversity/attachments/20190514/e9ac3db6/attachment.sig>