RomanNum3ral
/
archinstall
mirror of https://github.com/archlinux/archinstall.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
archinstall/archinstall/lib
History
Clinton Phillips 5fd2f9b627
fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) 
* fix: restrict EFI partition permissions with fmask/dmask=0077

Mount the ESP with fmask=0077 and dmask=0077 to prevent world-readable
files like /efi/loader/random-seed.

Closes #4241

* fix(efi): collapse fmask/dmask dedup to dict.fromkeys one-liner

Per @Torxed's review feedback. Same semantics as the previous loop
(dedupe by exact-string match) but shorter. dict.fromkeys preserves
insertion order, where set() would not.

* fix(efi): drop defensive list wrap per review

The list() copy on line 378 was load-bearing only if options were
mutated downstream, but the EFI branch reassigns options via
dict.fromkeys() (line 381) and the non-EFI branch passes through
to mount() without mutating. Drop the copy.
 		2026-05-19 13:36:28 +10:00
..
applications Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
authentication Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
bootloader Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
disk Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
general Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
locale Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
menu Fix truncated package metadata in additional packages preview (#3580) (#4510) 2026-05-07 10:17:13 +10:00
mirror Update Italian translation + fix a string (#4545) 2026-05-17 11:26:30 +10:00
models Add IWD standalone option to network configuration + fix NM_IWD (#4528) 2026-05-15 13:57:31 +10:00
network Add IWD standalone option to network configuration + fix NM_IWD (#4528) 2026-05-15 13:57:31 +10:00
packages Fix truncated package metadata in additional packages preview (#3580) (#4510) 2026-05-07 10:17:13 +10:00
pacman Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
profile Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
user Pull `ui` module one level up (#4515) 2026-05-03 23:54:42 +02:00
utils Add constant for archiso mountpoint (#4377) 2026-04-06 22:41:33 +10:00
__init__.py Converted the lib to a pip supported structure to make packaging easier. Also tweaked some minor issues and added the AUR function 2020-07-06 18:44:42 +02:00
args.py Enhance log sharing capability (#4526) 2026-05-15 21:38:17 +10:00
boot.py Remove invalid container PATH lookup (#4413) 2026-04-12 14:48:51 +10:00
command.py Use bools instead of time values for SysCommandWorker attributes (#4462) 2026-04-22 21:33:35 +10:00
configuration.py Enhance config types and summary (#4532) 2026-05-10 22:35:53 +02:00
crypt.py Convert imports to absolute imports (#4196) 2026-02-26 20:17:48 +11:00
exceptions.py Update ruff formatter (#3496) 2025-05-24 07:58:42 +00:00
global_menu.py Add translation CI validation (#4519) 2026-05-18 20:10:56 +10:00
hardware.py Fix sway+nvidia confirmation dialog (#4481) (#4485) 2026-04-28 21:02:32 +10:00
installer.py fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) 2026-05-19 13:36:28 +10:00
linux_path.py Add LPath execute permissions methods (#4378) 2026-04-06 09:16:21 +02:00
networking.py Replace time.time with time.monotonic to avoid clock drift issues (#4492) 2026-04-28 13:34:33 +02:00
output.py Enhance log sharing capability (#4526) 2026-05-15 21:38:17 +10:00
pathnames.py Add constant for mirrorlist (#4403) 2026-04-11 10:17:29 +10:00
plugins.py Move get_version() to version module (#4270) 2026-03-01 11:31:13 +11:00
translationhandler.py Set console font automatically when selecting language (#4356) 2026-04-21 18:36:29 +10:00
version.py Move get_version() to version module (#4270) 2026-03-01 11:31:13 +11:00