Am 04.10.23 um 08:38 schrieb Marc Haber:
Package: systemd
Version: 254.5-1
Severity: minor
File: /usr/share/man/man8/systemd-gpt-auto-generator.8.gz

Hi,

on my systems, /boot/efi is mounted via /etc/fstab. I am not sure
whether this is wrong, but I'd like it to be mounted all the time and
stay mounted. When aide runs, a generated efi.automount is invoked and
mounts /boot/efi again over the already mounted filesystem.

Since the EFI partition is a vfat filesystem which doesn't have inodes,
the inode values are synthesized differently for every aide run, which
triggers a security mechanism in aide since aide now thinks that
somebody is trying to move a different file in place between file
enumeration and checksum building.

Could the generated automounter please grow a condition to not act if
the filesystem in question is already mounted?

hm, that sounds like a bug. Reading man systemd-gpt-auto-generator
'''

The ESP is mounted to /boot/ if that directory exists and is not used for XBOOTLDR, and otherwise to /efi/. Same as for /boot/, an automount unit is used. The mount point will be created if necessary.

No configuration is created for mount points that are configured in fstab(5) or when the target directory contains files.

'''

You can disable systemd-gpt-auto-generator via the systemd.gpt_auto=0 kernel command line parameter until this is addressed.

Michael

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to