Trying out `shiftfs`

So to be the safest, I’d actually do it on the source mount to avoid any potential changes on the bind-mounts.

If you have a separate partition for your /home, then add nosuid,nodev to its mount options in /etc/fstab.

If you don’t, you should be able to add an extra line like /home /home none bind,nodev,nosuid 0 0 which may do the trick (bind-mounts are weird sometimes, so you’ll want to make sure that it’s correct in /proc/mounts).

1 Like