X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Fcore%2Fmachine-id-setup.c;h=ca163978f39a885142dade4023c01f2192ed885a;hp=636519c00c81d7d17b41fc675642fd114bbac3f5;hb=a4783bd17ad96f55b0fe83a50959da13555292bf;hpb=ab94af9201496ea3aa59bbf2a01eb750fbd1c08a

diff --git a/src/core/machine-id-setup.c b/src/core/machine-id-setup.c
index 636519c00..ca163978f 100644
--- a/src/core/machine-id-setup.c
+++ b/src/core/machine-id-setup.c
@@ -35,6 +35,7 @@
 #include "mkdir.h"
 #include "log.h"
 #include "virt.h"
+#include "fileio.h"
 
 static int shorten_uuid(char destination[36], const char *source) {
         unsigned i, j;
@@ -100,7 +101,7 @@ static int generate(char id[34]) {
                         if (k >= 36) {
                                 r = shorten_uuid(id, uuid);
                                 if (r >= 0) {
-                                        log_info("Initializing machine ID from KVM UUID");
+                                        log_info("Initializing machine ID from KVM UUID.");
                                         return 0;
                                 }
                         }
@@ -119,7 +120,7 @@ static int generate(char id[34]) {
                         if (strlen(e) >= 36) {
                                 r = shorten_uuid(id, e);
                                 if (r >= 0) {
-                                        log_info("Initializing machine ID from container UUID");
+                                        log_info("Initializing machine ID from container UUID.");
                                         free(e);
                                         return 0;
                                 }
@@ -226,13 +227,17 @@ int machine_id_setup(void) {
         }
 
         /* And now, let's mount it over */
-        r = mount("/run/machine-id", "/etc/machine-id", "bind", MS_BIND|MS_RDONLY, NULL) < 0 ? -errno : 0;
+        r = mount("/run/machine-id", "/etc/machine-id", NULL, MS_BIND, NULL) < 0 ? -errno : 0;
         if (r < 0) {
                 unlink("/run/machine-id");
                 log_error("Failed to mount /etc/machine-id: %s", strerror(-r));
-        } else
+        } else {
                 log_info("Installed transient /etc/machine-id file.");
 
+                /* Mark the mount read-only */
+                mount(NULL, "/etc/machine-id", NULL, MS_BIND|MS_RDONLY|MS_REMOUNT, NULL);
+        }
+
 finish:
 
         if (fd >= 0)