systemd/units/sys-fs-fuse-connections.mount

#  SPDX-License-Identifier: LGPL-2.1+
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=FUSE Control File System
Documentation=https://www.kernel.org/doc/Documentation/filesystems/fuse.txt
Documentation=https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
DefaultDependencies=no
ConditionPathExists=/sys/fs/fuse/connections
ConditionCapability=CAP_SYS_ADMIN
ConditionVirtualization=!private-users
After=systemd-modules-load.service
Before=sysinit.target

[Mount]
What=fusectl
Where=/sys/fs/fuse/connections
Type=fusectl
Options=nosuid,nodev,noexec
Add SPDX license headers to unit files 2017-11-18 19:35:03 +03:00			`# SPDX-License-Identifier: LGPL-2.1+`
			`#`
units: introduce unit file for FUSE fs FUSE and configfs is very very similar, so handle both the same way. 2011-09-22 05:00:04 +04:00			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends. 2012-04-12 02:20:58 +04:00			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
units: introduce unit file for FUSE fs FUSE and configfs is very very similar, so handle both the same way. 2011-09-22 05:00:04 +04:00			`# (at your option) any later version.`

			`[Unit]`
			`Description=FUSE Control File System`
man: add Documentation= tags to all kinds of missing units 2012-06-27 03:07:04 +04:00			`Documentation=https://www.kernel.org/doc/Documentation/filesystems/fuse.txt`
units: use https for the freedesktop url (#6227) 2017-06-29 05:54:12 +03:00			`Documentation=https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems`
units: introduce unit file for FUSE fs FUSE and configfs is very very similar, so handle both the same way. 2011-09-22 05:00:04 +04:00			`DefaultDependencies=no`
			`ConditionPathExists=/sys/fs/fuse/connections`
units: don't try to mount the FUSE fs if we lack the privileges for it See: https://lists.freedesktop.org/archives/systemd-devel/2016-February/035740.html 2016-02-11 01:02:53 +03:00			`ConditionCapability=CAP_SYS_ADMIN`
units: disable /sys/fs/fuse/connections in private user namespaces (#4592) The mount fails, even though CAP_SYS_ADMIN is granted. Only file systems with FU_USERNS_MOUNT in .fs_flags may be mounted in userns, and the patch to add that fusectl was rejected [1]. It would be nice if we could check if the kernel has FU_USERNS_MOUNT for a given fs type, since this could change over time, but this information doesn't seem to be exported. So let's just skip this mount in userns to avoid an error during boot. [1] https://patchwork.kernel.org/patch/2828269/ 2016-11-11 21:00:33 +03:00			`ConditionVirtualization=!private-users`
units: introduce unit file for FUSE fs FUSE and configfs is very very similar, so handle both the same way. 2011-09-22 05:00:04 +04:00			`After=systemd-modules-load.service`
			`Before=sysinit.target`

			`[Mount]`
			`What=fusectl`
			`Where=/sys/fs/fuse/connections`
			`Type=fusectl`
units: set nodev,nosuid,noexec flags for various secondary API VFS A couple of API VFS we mount via .mount units. Let's set the three flags for those too, just in case. This is just paranoia, nothing else, but shouldn't hurt. 2019-03-25 21:39:00 +03:00			`Options=nosuid,nodev,noexec`