Marek Marczykowski-Górecki:
> On Mon, Apr 17, 2017 at 10:02:00PM +0000, Patrick Schleizer wrote:
>>> Alternately, mount-dirs.sh could have
>>> a hook that points to a specific user script in /etc.
> 
>> User script sounds a bit limited. What about something a little more
>> flexible?
> 
>> Untested pseudo code:
> 
>> if [ -d /etc/qubes/mount-dirs-post.d ]; then
>>    run-parts /etc/qubes/mount-dirs-post.d
>> fi
> 
> IMO this is the way to go. In addition to your VM hardening scripts,
> this could be used also for some /rw initialization, beyond /etc/skel.
> AFAIR there was a need for similar thing to copy Tor Browser there.
> 
> As for implementation - do we want it in /etc, /usr/lib, or both (so
> files in /etc could override /usr/lib)?

Yes in both. Actually in all three. I.e. /etc/, /usr/lib and in
/usr/local (/rw) to make it complete.

> But having both means we can't
> use run-parts :(

Why not just use above "Untested pseudo code" three times with the
different dirs? :)

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/f98aa7d1-0dda-30b5-d576-a26135ef0ccb%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Reply via email to