napcok/calamares
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[initcpio] Minor documentation updates

Browse Source
This commit is contained in:
dalto 2022-01-01 12:14:42 -06:00
parent 475c0d21a1
commit 3be6946d93
2 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/modules/initcpio/InitcpioJob.cpp
View File

@ -32,7 +32,7 @@ InitcpioJob::prettyName() const
return tr( "Creating initramfs with mkinitcpio." ); return tr( "Creating initramfs with mkinitcpio." );
} }
/** @brief Sets conservative permissions on each initramfs /** @brief Sets secure permissions on each initramfs
* *
* Iterates over each initramfs contained directly in the directory @p d. * Iterates over each initramfs contained directly in the directory @p d.
* For each initramfs found, the permissions are set to owner read/write only. * For each initramfs found, the permissions are set to owner read/write only.

14
src/modules/initcpio/initcpio.conf
View File

@ -5,16 +5,22 @@
--- ---
# This key defines the kernel to be loaded. # This key defines the kernel to be loaded.
# It can have the following values: # It can have the following values:
# - the name of a single preset # - the name of a single mkinitcpio preset
# - empty or unset, interpreted as "all" # - empty or unset
# - the literal string "all" # - the literal string "all"
# #
# If kernel is "all" or empty/unset then mkinitpio is called for all kernels. Otherwise # If kernel is set to "all" or empty/unset then mkinitpio is called for all
# it is called with a single prefix with the value contained in kernel # kernels. Otherwise it is called with a single preset with the value
# contained in kernel.
# #
kernel: linux kernel: linux
# Set this to true to turn off mitigations for lax file # Set this to true to turn off mitigations for lax file
# permissions on initramfs (which, in turn, can compromise # permissions on initramfs (which, in turn, can compromise
# your LUKS encryption keys, CVS-2019-13179). # your LUKS encryption keys, CVS-2019-13179).
#
# If your initramfs are stored in the EFI partition or another non-POSIX
# filesystem, this has no effect as the file permissions cannot be changed.
# In this case, ensure the partition is mounted securely.
#
be_unsafe: false be_unsafe: false