Re: overlayfs-etc on top of dm-verity?
Ayoub Zaki <[email protected]> Fri, 27 Mar 2026 14:26:29 +0100
| Newsgroups | org.yoctoproject.lists.yocto |
|---|---|
| Message-ID | <CA+-BmJbrTDW9bgT_RN6uEirtGMq4i6euR3JzvnDEhKwPT3DLbQ@mail.gmail.com> |
Hi Michael, From a security perspective I would strongly advise against overlaying the entire /etc as it undermines the integrity provided by secure boot. Instead only overlay the specific files that actually need to be modified. In addition, consider enforcing integrity protection on the upper layer and consider alternatively switch to bind mounts for those files. Best