Re: overlayfs-etc on top of dm-verity?

Ayoub Zaki <[email protected]> Fri, 27 Mar 2026 14:26:29 +0100
Newsgroups org.yoctoproject.lists.yocto
Message-ID <CA+-BmJbrTDW9bgT_RN6uEirtGMq4i6euR3JzvnDEhKwPT3DLbQ@mail.gmail.com>
Hi Michael,
From a security perspective I would strongly advise against overlaying the
entire /etc as it undermines the integrity provided by secure boot. Instead
only overlay the specific files that actually need to be modified. In
addition, consider enforcing integrity protection on the upper layer and
consider alternatively switch to bind mounts for those files.

Best