Public bug reported:

On modern Ubuntu systems, /sys/kernel/debug is mounted by default due to
sys-kernel-debug.mount being enabled by default.

AFAIK, this FS doesn't need to be mounted for normal operations and back
in the day, there were concerns about the security implications of
having it enabled/mounted by default (https://lists.ubuntu.com/archives
/kernel-team/2011-January/013418.html).

Would it be possible to not have it mounted by default?


$ apt-cache policy systemd
systemd:
  Installed: 245.4-4ubuntu3.4
  Candidate: 245.4-4ubuntu3.4
  Version table:
 *** 245.4-4ubuntu3.4 500
        500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 
Packages
        100 /var/lib/dpkg/status
     245.4-4ubuntu3 500
        500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages
$ lsb_release -rd
Description:    Ubuntu 20.04.1 LTS
Release:        20.04

** Affects: systemd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1912855

Title:
  debugfs shouldn't be mounted by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1912855/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to