main/mkinitfs: make root readonly for world

backported patch

2 files changed, 31 insertions, 1 deletions

diff --git a/main/mkinitfs/0001-init-make-readonly-for-world-when-tmpfs.patch b/main/mkinitfs/0001-init-make-readonly-for-world-when-tmpfs.patch
new file mode 100644
index 0000000000..b777432b33
--- /dev/null
+++ b/main/mkinitfs/0001-init-make-readonly-for-world-when-tmpfs.patch
@@ -0,0 +1,28 @@
+From 666c4d431cd585ce45df93bef58ada648bf88b55 Mon Sep 17 00:00:00 2001
+From: Natanael Copa <ncopa@alpinelinux.org>
+Date: Fri, 7 Jan 2011 12:48:39 +0000
+Subject: [PATCH 1/3] init: make / readonly for world when tmpfs
+
+---
+ initramfs-init.in |    4 ++--
+ 1 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/initramfs-init.in b/initramfs-init.in
+index d140d75..8604c12 100755
+--- a/initramfs-init.in
++++ b/initramfs-init.in
+@@ -328,9 +328,9 @@ if [ "$SINGLEMODE" = "yes" ]; then
+ fi
+ 
+ # mount tmpfs sysroot
+-root_opts=
++root_opts="-o mode=0755"
+ if [ -n "$KOPT_root_size" ]; then
+-       root_opts="-o size=$KOPT_root_size"
++       root_opts="$root_opts,size=$KOPT_root_size"
+ fi
+ mount -t tmpfs $root_opts tmpfs $sysroot
+ 
+-- 
+1.7.3.5
+
diff --git a/main/mkinitfs/APKBUILD b/main/mkinitfs/APKBUILD
index a970586612..38a2821bf7 100644
--- a/main/mkinitfs/APKBUILD
+++ b/main/mkinitfs/APKBUILD
@@ -1,12 +1,13 @@
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=mkinitfs
 pkgver=2.1.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Tool to generate initramfs images for Alpine"
 url=http://git.alpinelinux.org/cgit/mkinitfs
 depends="busybox apk-tools>=2.0"
 triggers="$pkgname.trigger:/usr/share/kernel/*"
 source="http://git.alpinelinux.org/cgit/$pkgname/snapshot/$pkgname-$pkgver.tar.bz2
+        0001-init-make-readonly-for-world-when-tmpfs.patch
         eglibc.patch
         "
 license="GPL-2"
@@ -31,4 +32,5 @@ package() {
         make install DESTDIR="$pkgdir" || return 1
 }
 md5sums="e35426eb23b379a648500a353031e719  mkinitfs-2.1.2.tar.bz2
+e38e2f5c2b22b2789b5bc03aacba4d2d  0001-init-make-readonly-for-world-when-tmpfs.patch
 e59c2f7de496fe430b07e32fd812ebe0  eglibc.patch"