[Dev] Secure Smack Launcher

José Bollo jose.bollo at open.eurogiciel.org
Wed Mar 19 08:26:03 GMT 2014


On mar, 2014-03-18 at 15:27 +0100, José Bollo wrote:

> I tried to use the second solution: remounting smackfs.
> Currently, it doesn't work because the smackfs is internally (at kernel
> code level) mounted as "mount_single". I'm sure that some solution will
> be found for this problem, I'm trying to mount with mount_nodev because
> it is a minor change. 

I have to add that the remounting of smackfs as read only works well
now, without any kernel patch. My comment was false. It came from a bug
in remounting bounds filesystem parts as read-only. Sorry for the
convenience.

Best regards
José



More information about the Dev mailing list