Instead of duplicating the options from the upstream service file and letting them get out of sync, use the file directly and only configure the needed overrides. In particular, the upstream improvements include the mounts not being globally visible any more, so they can't be used for bypassing nosuid and the like, and the custom cleanup script that performed the unmount becomes unnecessary.
3.9 KiB
3.9 KiB