diff --git a/NEWS b/NEWS index 141891dc..d40c6b85 100644 --- a/NEWS +++ b/NEWS @@ -1,5 +1,8 @@ xbps-0.38 (???): + * xbps-uchroot(8): do not remount / unnecessarily; just mount it as private + and nosuid once; this is enough for our use cases. + * xbps-query(8): --show/-S mode now explicitly prints pkg metadata keys with the bold ANSI escape code. diff --git a/bin/xbps-uchroot/main.c b/bin/xbps-uchroot/main.c index 86381a4d..9aa3b54b 100644 --- a/bin/xbps-uchroot/main.c +++ b/bin/xbps-uchroot/main.c @@ -206,11 +206,8 @@ main(int argc, char **argv) } if (!openvz_container()) { /* Make / a private mount */ - if (mount(NULL, "/", "none", MS_PRIVATE|MS_REC, NULL) == -1) - die("mount(/, MS_PRIVATE|MS_REC)"); - /* Remount / with nosuid just in case */ - if (mount (NULL, "/", "none", MS_PRIVATE|MS_REMOUNT|MS_NOSUID, NULL) == -1) - die("mount(/, MS_PRIVATE|MS_REMOUNT|MS_NOSUID"); + if (mount(NULL, "/", "none", MS_PRIVATE|MS_REC|MS_NOSUID, NULL) == -1) + die("mount(/, MS_PRIVATE|MS_REC|MS_NOSUID)"); } /* mount /proc */