shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-13 13:17:43 +03:00
Code

core: refuse StateDirectory=private, as our internal DynamicUser=1 symlink is called that way

Browse Source 
Let's better be safe than sorry.
This commit is contained in:
Lennart Poettering 2018-05-16 22:25:12 -04:00 committed by Yu Watanabe
parent 0e960f9b5c
commit e886568873
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/core/load-fragment.c
View File

@ -3988,9 +3988,21 @@ int config_parse_exec_directories(
continue; continue;
} }
if (!path_is_normalized(k) || path_is_absolute(k)) { if (!path_is_normalized(k)) {
log_syntax(unit, LOG_ERR, filename, line, 0, log_syntax(unit, LOG_ERR, filename, line, 0,
"%s= path is not valid, ignoring assignment: %s", lvalue, rvalue); "%s= path is not normalized, ignoring assignment: %s", lvalue, rvalue);
continue;
}
if (path_is_absolute(k)) {
log_syntax(unit, LOG_ERR, filename, line, 0,
"%s= path is absolute, ignoring assignment: %s", lvalue, rvalue);
continue;
}
if (path_startswith(k, "private")) {
log_syntax(unit, LOG_ERR, filename, line, 0,
"%s= path can't be 'private', ingoring assignment: %s", lvalue, rvalue);
continue; continue;
} }