Force Filesystem Type
While Mounting

> rootfstype=TYPE

/dev/disk /mount/point TYPE defaults 0 0

$ mount -t TYPE /dev/disk /mnt/point

📂🐧 When mounting a filesystem, Linux usually automatically detects the type and uses the correct filesystem code. In highly sensitive setups that utilize verified boot, this can be a problem. ⚠If an attacker manages to manipulate the disk, they can trigger bugs in less secure filesystem implementations. 🐞 As a hypothetical example, if your product is using ext4 as the filesystem, but there is an exploitable bug in, say, squashfs or any other filesystem, an attacker can replace the ext4 filesystem with a crafted squashfs to trigger those bugs. 🎯