diff options
| author | Lennart Poettering <lennart@poettering.net> | 2018-04-18 18:50:06 +0200 |
|---|---|---|
| committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2018-04-18 18:50:06 +0200 |
| commit | edd1dcd091bf7df555f099d68033a4405b804070 (patch) | |
| tree | e5f12cc43de1088909e9155ebbef213ad00cb9cb /man/systemd-socket-proxyd.xml | |
| parent | Merge pull request #8708 from poettering/namespace-repeat (diff) | |
| download | systemd-edd1dcd091bf7df555f099d68033a4405b804070.tar.xz systemd-edd1dcd091bf7df555f099d68033a4405b804070.zip | |
man: don't place nginx socket in /tmp (#8757)
First of all, it's frickin' ugly and wrong, as IPC sockets should be
placed in /run and definitely not under a guessable name under
world-writable /tmp. Secondly, it can't even work as we set
PrivateTmp=yes on the service.
Hence, let's clean up the example, and simply use a socket in /run
instead.
Fixes: #8419
Diffstat (limited to 'man/systemd-socket-proxyd.xml')
| -rw-r--r-- | man/systemd-socket-proxyd.xml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/man/systemd-socket-proxyd.xml b/man/systemd-socket-proxyd.xml index ced509daab..68baccae30 100644 --- a/man/systemd-socket-proxyd.xml +++ b/man/systemd-socket-proxyd.xml @@ -111,7 +111,7 @@ Requires=proxy-to-nginx.socket After=proxy-to-nginx.socket [Service] -ExecStart=/usr/lib/systemd/systemd-socket-proxyd /tmp/nginx.sock +ExecStart=/usr/lib/systemd/systemd-socket-proxyd /run/nginx/socket PrivateTmp=yes PrivateNetwork=yes]]></programlisting> </example> @@ -120,7 +120,7 @@ PrivateNetwork=yes]]></programlisting> <programlisting> <![CDATA[[…] server { - listen unix:/tmp/nginx.sock; + listen unix:/run/nginx/socket; […]]]> </programlisting> </example> |