shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-12-22 17:35:35 +03:00
Code
d30d9bf0ac
systemd/tmpfiles.d
History
Lennart Poettering 40fb9eebbc tmpfiles: use same credstore perms everywhere 
In b6033b7060 support was added to create
{/etc|/run}/credstore{|.encrypted} via tmpfiles.d with perms 0000. These
perms are so restrictive that not even root can access them unless it
has CAP_DAC_OVERRIDE capability. This is creates the dirs at boot time

In 24039e1207 support was added to create
/etc/credstore with perm 0700 from meson.build at build time.

This patch makes unifies the two parts:

1. creates both /etc/credstore *and* /etc/credstore.encrypted in both
   places (the build system still won't create them in /run/, since
   that's pointless since not shipped, and the runtime won't create the
   dirs below /usr/lib/, since that's not generically writable anyway).

2. Both at runtime and at build time we'll create the dirs with mode
   0700. This is easier for packaging tools to handle since they
   generally react pretty negatively on dirs they can't enumerate.
2023-05-31 11:15:26 +08:00
..
credstore.conf tmpfiles: use same credstore perms everywhere 2023-05-31 11:15:26 +08:00
etc.conf.in vconsole: allow setting default keymap through build option 2023-02-15 20:00:51 +00:00
home.conf tmpfiles.d: change all subvolumes to use quota 2015-10-22 01:59:25 +02:00
journal-nocow.conf tmpfiles.d/journal-nocow: fix typo (#6804) 2017-09-12 13:28:21 -03:00
legacy.conf.in docs: move /var/log/README to a tmpfiles.d symlink 2021-07-21 17:29:06 +02:00
meson.build tmpfiles: automatically create /etc/credstore/ and friends 2023-01-27 10:03:38 +01:00
portables.conf license: LGPL-2.1+ -> LGPL-2.1-or-later 2020-11-09 13:23:58 +09:00
provision.conf tmpfiles.d: do not fail if provision.conf fails 2022-11-04 15:42:16 +01:00
README Add READMEs in all .d directories 2021-03-26 09:35:07 +01:00
static-nodes-permissions.conf.in meson: use jinja2 for tmpfiles.d templates 2021-05-19 10:24:43 +09:00
systemd-network.conf tmpfiles: Split networkd entries into a separate file 2022-05-03 20:46:14 +02:00
systemd-nologin.conf tmpfiles.d: drop misleading comment 2023-02-21 13:46:39 +01:00
systemd-nspawn.conf treewide: fix typos and remove accidental repetition of words 2016-07-11 16:18:43 +02:00
systemd-pstore.conf tree-wide: replace "plural(s)" by "plurals" 2022-10-17 15:10:53 +02:00
systemd-resolve.conf tmpfiles: split out config for systemd-resolve 2021-11-16 16:56:08 +01:00
systemd-tmp.conf coredump: fixed bug - some coredump temp files could be lost 2019-05-31 12:57:35 +02:00
systemd.conf.in Remove duplicated word 2022-10-29 14:19:43 +09:00
tmp.conf tmpfiles: split tmp.conf out 2019-04-13 12:07:03 +02:00
var.conf.in meson: use jinja2 for tmpfiles.d templates 2021-05-19 10:24:43 +09:00
x11.conf tmpfiles.d: remove .Test-unix, it's obsolete 2021-08-31 10:57:37 +02:00

README 

Files in this directory contain configuration for systemd-tmpfiles, a program
to create, delete, and clean up volatile and temporary files and directories.

See man:tmpfiles.d(5) for explanation of the configuration file format, and
man:systemd-tmpfiles(8) for a description of when and how this configuration is
applied.

Use 'systemd-analyze cat-config tmpfiles.d' to display the effective config.