shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-03-16 22:50:13 +03:00
Code
systemd-stable/tmpfiles.d/var.conf

24 lines
563 B
Plaintext
Raw Permalink Normal View History

tmpfiles: always recreate the most basic directory structure in /var Let's allow booting up with /var empty. Only create the most basic directories to get to a working directory structure and symlink set in /var.
2014-06-11 00:12:21 +02:00
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
# See tmpfiles.d(5) for details
tmpfiles: make /home and /var btrfs subvolumes by default when booted up with them missing This way the root subvolume can be left read-only easily, and variable and user data writable with explicit quota set.
2015-04-21 17:28:16 +02:00
v /var 0755 - - -
tmpfiles: if /var is mounted from tmpfs, we should adjust its access mode
2014-06-11 09:20:17 +02:00
tmpfiles: always recreate the most basic directory structure in /var Let's allow booting up with /var empty. Only create the most basic directories to get to a working directory structure and symlink set in /var.
2014-06-11 00:12:21 +02:00
L /var/run - - - - ../run
d /var/log 0755 - - -
f /var/log/wtmp 0664 root utmp -
f /var/log/btmp 0600 root utmp -
d /var/cache 0755 - - -
d /var/lib 0755 - - -
nspawn,machined: change default container image location from /var/lib/container to /var/lib/machines Given that this is also the place to store raw disk images which are very much bootable with qemu/kvm it sounds like a misnomer to call the directory "container". Hence, let's change this sooner rather than later, and use the generic name, in particular since we otherwise try to use the generic "machine" preferably over the more specific "container" or "vm".
2015-01-15 01:40:02 +01:00
v /var/lib/machines 0700 - - -
tmpfiles.d: Create /var/lib/containers Create /var/lib/containers so that it exists with an appropriate mode. We want 0700 by default so that users on the host aren't able to call suid root binaries in the container. This becomes a security issue if a user can enter a container as root, create a suid root binary, and call that from the host. (This assumes that containers are caged by mandatory access control or are started as user).
2014-11-20 14:37:08 +01:00
tmpfiles: always recreate the most basic directory structure in /var Let's allow booting up with /var empty. Only create the most basic directories to get to a working directory structure and symlink set in /var.
2014-06-11 00:12:21 +02:00
d /var/spool 0755 - - -
Copy Permalink