From 744b7801cbd4d32f20827709fa98f6888400fcdd Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Tue, 18 Aug 2026 19:30:43 +0100 Subject: [PATCH] man: note that GPT is implicitly trusted by sd-mountfsd --- man/systemd-mountfsd.service.xml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/man/systemd-mountfsd.service.xml b/man/systemd-mountfsd.service.xml index 2e623a2728..a42c71bdea 100644 --- a/man/systemd-mountfsd.service.xml +++ b/man/systemd-mountfsd.service.xml @@ -46,7 +46,10 @@ If the disk image contains a Verity enabled disk image, along with a signature partition with a key in the kernel keyring or in /etc/verity.d/*.crt (and related - directories) the disk image is considered trusted. + directories) the disk image is considered trusted. Note that the GPT partition table of the disk image + is parsed by the kernel to discover its contents and systemd-mountfsd assumes that + the GPT parser is robust against malformed input and applies no security policies or checks around it. + This service provides one Varlink service: