diff --git a/classes/security_demand.bbclass b/classes/security_demand.bbclass index 04c4cc17763cbd329e58093394c859a243a407b3..cafa807062cf26b9e770094ce67ad34a3f54ef0b 100644 --- a/classes/security_demand.bbclass +++ b/classes/security_demand.bbclass @@ -321,6 +321,8 @@ adjust_overlay_squashfs() { sed -i 's|Environment=MOUNT_COPYBIND_AVOID_OVERLAYFS=0|Environment=MOUNT_COPYBIND_AVOID_OVERLAYFS=1|g' ${IMAGE_ROOTFS}/usr/lib/systemd/system/var-volatile-lib.service sed -i '/^Before=local-fs.target systemd-random-seed.service$/a After=var-volatile-log.service' ${IMAGE_ROOTFS}/usr/lib/systemd/system/var-volatile-lib.service sed -i '/^ExecStart=.*/a ExecStartPost=/usr/bin/ln -sf /var/lib/systemd/coredump /log/coredump' ${IMAGE_ROOTFS}/usr/lib/systemd/system/var-volatile-lib.service + sed -i 's|Environment=MOUNT_COPYBIND_AVOID_OVERLAYFS=0|Environment=MOUNT_COPYBIND_AVOID_OVERLAYFS=1|g' ${IMAGE_ROOTFS}/usr/lib/systemd/system/var-volatile-cache.service + sed -i '/^Before=local-fs.target$/a After=var-volatile-log.service' ${IMAGE_ROOTFS}/usr/lib/systemd/system/var-volatile-cache.service else mkdir -p ${IMAGE_ROOTFS}/log/ && chmod 750 ${IMAGE_ROOTFS}/log/ ln -sf /var/lib/systemd/coredump ${IMAGE_ROOTFS}/log/coredump