V-72043 makes some assumptions about what filesystems are removable. While the filesystems listed in the default (xfs & ext4) are not often seen in removable media as opposed to FAT, I'm not sure if filtering like this is the best way to go about checking this control. Furthermore, should other filesystems such as sysfs or proc be included?
I'd propose a general approach similar to what is currently happening in V-72075:
Filter mounts based on filesystems mounted
Gather all options for remaining mounts
Determine block devices for remaining mounts
Check if the device is removable
If the device is removable, make sure all mounts corresponding to the device have the correct options
V-72043 makes some assumptions about what filesystems are removable. While the filesystems listed in the default (
xfs&ext4) are not often seen in removable media as opposed toFAT, I'm not sure if filtering like this is the best way to go about checking this control. Furthermore, should other filesystems such assysfsorprocbe included?I'd propose a general approach similar to what is currently happening in V-72075: