shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-23 21:35:11 +03:00
Code
12850a7f2e
systemd/tmpfiles.d
History
Lennart Poettering b6033b7060 tmpfiles: automatically create /etc/credstore/ and friends 
This adds a tmpfiles.d/ snippet for LoadCredential= style credentials
directories in /etc/ and /run/.

This is done primarily to ensure that the access modes for the dirs are
set up properly, in the most restrictive ways. Specifically these are
set to 0000, so that CAP_DAC_OVERRIDE is necessary to enumerate and read
the credentials, and being UID=0 is not sufficient to do so.

This creates /etc/credstore/, but leaves /run/credstore/ absent if
missing, for now. Thinking is: the latter being non-persistent is
created by software usually, not manually by users, and hence more
likely right. But dunno, we might want to revisit this sooner or later.

This is ultimately an exercise to advertise the LoadCredential= concept
a bit, and do so in a reasonably secure way, underlining the safety of
the concept.
2023-01-27 10:03:38 +01:00
..
credstore.conf tmpfiles: automatically create /etc/credstore/ and friends 2023-01-27 10:03:38 +01:00
etc.conf.in factory: populate /etc/locale.conf with systemd build-time setting 2021-12-23 11:01:12 +00:00
home.conf tmpfiles.d: change all subvolumes to use quota 2015-10-22 01:59:25 +02:00
journal-nocow.conf tmpfiles.d/journal-nocow: fix typo (#6804) 2017-09-12 13:28:21 -03:00
legacy.conf.in docs: move /var/log/README to a tmpfiles.d symlink 2021-07-21 17:29:06 +02:00
meson.build tmpfiles: automatically create /etc/credstore/ and friends 2023-01-27 10:03:38 +01:00
portables.conf license: LGPL-2.1+ -> LGPL-2.1-or-later 2020-11-09 13:23:58 +09:00
provision.conf tmpfiles.d: do not fail if provision.conf fails 2022-11-04 15:42:16 +01:00
README Add READMEs in all .d directories 2021-03-26 09:35:07 +01:00
static-nodes-permissions.conf.in meson: use jinja2 for tmpfiles.d templates 2021-05-19 10:24:43 +09:00
systemd-network.conf tmpfiles: Split networkd entries into a separate file 2022-05-03 20:46:14 +02:00
systemd-nologin.conf Corect man page reference in systemd-nologin.conf comments 2019-09-24 09:48:03 +02:00
systemd-nspawn.conf treewide: fix typos and remove accidental repetition of words 2016-07-11 16:18:43 +02:00
systemd-pstore.conf tree-wide: replace "plural(s)" by "plurals" 2022-10-17 15:10:53 +02:00
systemd-resolve.conf tmpfiles: split out config for systemd-resolve 2021-11-16 16:56:08 +01:00
systemd-tmp.conf coredump: fixed bug - some coredump temp files could be lost 2019-05-31 12:57:35 +02:00
systemd.conf.in Remove duplicated word 2022-10-29 14:19:43 +09:00
tmp.conf tmpfiles: split tmp.conf out 2019-04-13 12:07:03 +02:00
var.conf.in meson: use jinja2 for tmpfiles.d templates 2021-05-19 10:24:43 +09:00
x11.conf tmpfiles.d: remove .Test-unix, it's obsolete 2021-08-31 10:57:37 +02:00

README 

Files in this directory contain configuration for systemd-tmpfiles, a program
to create, delete, and clean up volatile and temporary files and directories.

See man:tmpfiles.d(5) for explanation of the configuration file format, and
man:systemd-tmpfiles(8) for a description of when and how this configuration is
applied.

Use 'systemd-analyze cat-config tmpfiles.d' to display the effective config.