Add /efi in the hidding list when (fs=host)

When filesystem=host access is provided, some root folders are hidden, including /boot.

The bootloader specification now recommends mounting the system EFI filesystem in /efi
(currently visible) instead of /boot/efi (currently hidden). This hides /efi for the same
reasons /boot is already hidden.

(cherry picked from commit 397c97de9f)
This commit is contained in:
Gaël Donval
2022-10-31 16:14:00 +00:00
committed by Simon McVittie
parent ab698907a8
commit 9bd6fa0f26

View File

@@ -2435,8 +2435,8 @@ flatpak_context_make_sandboxed (FlatpakContext *context)
}
const char *dont_mount_in_root[] = {
".", "..", "lib", "lib32", "lib64", "bin", "sbin", "usr", "boot", "root",
"tmp", "etc", "app", "run", "proc", "sys", "dev", "var", NULL
".", "..", "lib", "lib32", "lib64", "bin", "sbin", "usr", "boot", "efi",
"root", "tmp", "etc", "app", "run", "proc", "sys", "dev", "var", NULL
};
static void