Bug#1053443: automount should not act if filesystem is already mounted

[Michael Biebl]

Am 04.10.23 um 08:38 schrieb Marc Haber:
> Package: systemd
> Version: 254.5-1
> Severity: minor
> File: /usr/share/man/man8/systemd-gpt-auto-generator.8.gz
> 
> Hi,
> 
> on my systems, /boot/efi is mounted via /etc/fstab. I am not sure
> whether this is wrong, but I'd like it to be mounted all the time and
> stay mounted. When aide runs, a generated efi.automount is invoked and
> mounts /boot/efi again over the already mounted filesystem.
> 
> Since the EFI partition is a vfat filesystem which doesn't have inodes,
> the inode values are synthesized differently for every aide run, which
> triggers a security mechanism in aide since aide now thinks that
> somebody is trying to move a different file in place between file
> enumeration and checksum building.
> 
> Could the generated automounter please grow a condition to not act if
> the filesystem in question is already mounted?

hm, that sounds like a bug. Reading man systemd-gpt-auto-generator
'''

        The ESP is mounted to /boot/ if that directory exists and is not 
used for XBOOTLDR, and otherwise to /efi/. Same as for /boot/, an 
automount unit is used. The mount point will be created if necessary.

        No configuration is created for mount points that are configured 
in fstab(5) or when the target directory contains files.

'''

You can disable systemd-gpt-auto-generator via the systemd.gpt_auto=0 
kernel command line parameter until this is addressed.

Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20231004/44507d20/attachment.sig>