arc-setup: Use '--no-canonicalize' for mount calls. [M98]
This prevents the mount call from being used to mount a directory at
an arbitrary location.
BUG=b:219072469
TEST=Repro case is broken.
TEST=arc.Boot.vm passes.
Change-Id: I0f4e1c2cb118151e6246c9bdc134e4c25fce557e
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/3456732
Commit-Queue: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Allen Webb <allenwebb@google.com>
Reviewed-by: Yusuke Sato <yusukes@chromium.org>
Reviewed-by: Zubin Mithra <zsm@chromium.org>
Owners-Override: Zubin Mithra <zsm@chromium.org>
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
(cherry picked from commit 1b93d0fab7ba8540865a9d3822ed2096ba00689c)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/3457753
diff --git a/arc/setup/init/arc-create-data.conf b/arc/setup/init/arc-create-data.conf
index e78a4da..0c1999a 100644
--- a/arc/setup/init/arc-create-data.conf
+++ b/arc/setup/init/arc-create-data.conf
@@ -23,9 +23,10 @@
"User home ${CHROMEOS_USER_HOME} does not exist"
exit 1
fi
- mount --bind ${CHROMEOS_USER_HOME} /run/arcvm/userhome
+ mount --no-canonicalize --bind ${CHROMEOS_USER_HOME} /run/arcvm/userhome
nsenter --mount=/run/namespaces/mnt_concierge \
- -- mount --bind /run/arcvm/userhome ${CHROMEOS_USER_HOME}
+ -- mount --no-canonicalize --bind \
+ /run/arcvm/userhome ${CHROMEOS_USER_HOME}
# Run arc-create-data in /run/namespaces/mnt_concierge. This namespace is
# created by vm_concierge.conf, so Concierge must be running in order to
# enter the namespace. This relies on ArcVmClientAdapter in Chrome to ensure
