From 64fa1562ddf70bd7ecd08e7da3db56cf740d9840 Mon Sep 17 00:00:00 2001
From: Thomas Kleinendorst <thomas@kleinendorst.info>
Date: Fri, 12 Apr 2024 12:21:45 +0200
Subject: [PATCH] Add whitelist for squashfs filesystem

---
 playbook.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/playbook.yml b/playbook.yml
index a8b044a..75fc844 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -20,6 +20,8 @@
     # devsec.hardening.os_hardening vars:
     os_auth_pw_max_age: 99999 # Effectively disables the setting as mentioned in the docs.
     os_cron_enabled: false # Cron isn't needed for the installation.
+    os_filesystem_whitelist:
+      - squashfs # Used by Snapcraft which is installed on the Raspberry Pi at some moment
     sysctl_overwrite:
       vm.mmap_rnd_bits: 16 # See the "sysctl - vm.mmap_rnd_bits" section of the docs.
     # devsec.hardening.ssh_hardening vars: