From: silas jeon <silasjeon@samsung.com>
Date: Thu, 9 Feb 2017 07:13:04 +0000 (+0900)
Subject: Make root partition mounted as read-only
X-Git-Tag: submit/tizen/20170214.082432~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=192ed9c81d78255654022d30ffe522261f4071b9;p=platform%2Fadaptation%2Fsystem-plugin.git

Make root partition mounted as read-only

Last step of making root partition as read-only, on every profile in-
cluding mobile, tv, wearable, common. It will make root partition more
secure and stable, updatable.

Change-Id: If68d8b191d0eea24fc17e762bbcec2a5334424e4
---

diff --git a/etc/fstab b/etc/fstab
index 10f7825..266fe0f 100644
--- a/etc/fstab
+++ b/etc/fstab
@@ -1,4 +1,4 @@
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-LABEL=system-data /opt          ext4    defaults,noatime 0      2
-LABEL=user      /opt/usr        ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+LABEL=system-data /opt          ext4    defaults,noatime    0      2
+LABEL=user      /opt/usr        ext4    defaults,noatime    0      2
diff --git a/etc/fstab_initrd b/etc/fstab_initrd
index 75b6c4b..5d9d47b 100644
--- a/etc/fstab_initrd
+++ b/etc/fstab_initrd
@@ -1,7 +1,7 @@
 # In case of using MCD initrd, / and /opt is already mounted by initrd
 # Thus, this patch is temporary files for wearable.
 # Basically, initrd should consider this issue.
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-PARTLABEL=system-data  /opt     ext4    defaults,noatime 0      2
-PARTLABEL=user     /opt/usr     ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+PARTLABEL=system-data  /opt     ext4    defaults,noatime    0      2
+PARTLABEL=user     /opt/usr     ext4    defaults,noatime    0      2
diff --git a/etc/fstab_initrd_lazymnt b/etc/fstab_initrd_lazymnt
index 4c80e4d..ef71810 100644
--- a/etc/fstab_initrd_lazymnt
+++ b/etc/fstab_initrd_lazymnt
@@ -1,6 +1,6 @@
 # In case of using MCD initrd, / and /opt is already mounted by initrd
 # Thus, this patch is temporary files for wearable.
 # Basically, initrd should consider this issue.
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-PARTLABEL=system-data  /opt     ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+PARTLABEL=system-data  /opt     ext4    defaults,noatime    0      2
diff --git a/etc/fstab_lazymnt b/etc/fstab_lazymnt
index 02154dc..2f335c7 100644
--- a/etc/fstab_lazymnt
+++ b/etc/fstab_lazymnt
@@ -1,3 +1,3 @@
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-LABEL=system-data /opt          ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+LABEL=system-data /opt          ext4    defaults,noatime    0      2