ramlog: harden the zram mounting

this is to improve the score of /var/log for FILE-6374 in Lynis audit
This commit is contained in:
Antony Kurniawan 2024-04-09 19:26:31 +00:00 committed by ColorfulRhino
parent 5e008a8f9b
commit 4df3bddd64
1 changed files with 1 additions and 1 deletions

View File

@ -126,7 +126,7 @@ case "$1" in
case $LOG_TYPE in
zram)
echo -e "Mounting $rd as $RAM_LOG \c" | $LOG_OUTPUT
mount -o discard $rd $RAM_LOG 2>&1 | $LOG_OUTPUT
mount -o discard,nosuid,noexec,nodev $rd $RAM_LOG 2>&1 | $LOG_OUTPUT
;;
tmpfs)
echo -e "Setting up $RAM_LOG as tmpfs \c" | $LOG_OUTPUT