debian: do not give access to host /run

10 years ago · 7bae8ae353
parent 2b1cb2f323
commit 7bae8ae353
2 changed files with 4 additions and 2 deletions
--- a/scripts_debian/02_install_groups.sh
+++ b/scripts_debian/02_install_groups.sh
@ -28,7 +28,8 @@ fi
 # ------------------------------------------------------------------------------
 # Mount system mount points
 # ------------------------------------------------------------------------------
-for fs in /dev /dev/pts /proc /sys /run; do mount -B $fs "${INSTALLDIR}/$fs"; done
+for fs in /dev /dev/pts /proc /sys; do mount -B $fs "${INSTALLDIR}/$fs"; done
+mount -t tmpfs none "${INSTALLDIR}/run"

 # ------------------------------------------------------------------------------
 # Execute any template flavor or sub flavor 'pre' scripts
--- a/scripts_debian/04_install_qubes.sh
+++ b/scripts_debian/04_install_qubes.sh
@ -27,7 +27,8 @@ fi
 # ------------------------------------------------------------------------------
 # Mount system mount points
 # ------------------------------------------------------------------------------
-for fs in /dev /dev/pts /proc /sys /run; do mount -B $fs "${INSTALLDIR}/$fs"; done
+for fs in /dev /dev/pts /proc /sys; do mount -B $fs "${INSTALLDIR}/$fs"; done
+mount -t tmpfs none "${INSTALLDIR}/run"

 # ------------------------------------------------------------------------------
 # Execute any template flavor or sub flavor 'pre' scripts