summaryrefslogtreecommitdiffstats
path: root/tmpfiles.d/systemd.conf.m4 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* sysusers,tmpfiles: re-create systemd-network, systemd-resolve and ↵Yu Watanabe2018-07-161-3/+3
| | | | | | | | | | | | | | systemd-timesync This partially reverts d4e9e574ea0b5d23598a317e68399584d229568b, 0187368cadea183e18c6d575a9d6b7f491a402af, and 4240cb02fda90ba11dfc0114201e42691132c6a9. The services systemd-networkd, systemd-resolved, and systemd-timesyncd enable DynamicUsers= and have bus interfaces. Unfortunately, these has many problems now. Let us create the relevant users, at least, tentatively. Fixes #9503.
* tmpfiles: specify access mode for /run/systemd/netifYu Watanabe2018-06-251-3/+3
| | | | | | This partially reverts 2af767729489f6baa98a2641b2007acab44ed353. As the directories are certainly readable and not-writable by non-privileged users.
* tmpfile: do not specify mode and owner to /run/systemd/netifYu Watanabe2018-06-221-3/+3
| | | | Fixes #9369.
* network: set DynamicUser= to systemd-networkd.serviceYu Watanabe2018-05-221-3/+3
|
* tmpfiles: create /var/{lib,log,cache}/private during early bootLennart Poettering2018-05-181-0/+4
| | | | | | | | | This directory is used by the DynamicUer= stuff when used in combination with StateDirectory=/LogDirectory=/CacheDirectory=. Let's make sure the dir exists early on with the right perms. This is not strictly necessary as we'll also create the dir on demand if it is missing, but in the interest of grabbing the name early on, and making things more explicit let's also list this in a tmpfiles.d/ snippet.
* tmpfiles.d: set primary group rights to r-w (#5265)lewo2017-02-081-6/+6
| | | | | | | | | | If the /var/log/journal directory is created with rigths 700, the application of an ACL rules without any primary group right sets it to 0. A chmod 755 on this file will then only set the ACL mask and let the ACL primary group right to 0. The directory is then unreadable for the primary group. This patch explicitly sets the primary group to avoid this problem. Fixes #5264.
* tmpfiles: don't set the x bit for volatile system journal when ACL support ↵Franck Bui2016-05-041-3/+6
| | | | | | | | | | | | | | | | | | | | | is enabled (#3079) When ACL support is enabled, systemd-tmpfiles-setup service sets the following ACL entries to the volatile system journal: $ getfacl /run/log/journal/*/system.journal getfacl: Removing leading '/' from absolute path names # file: run/log/journal/xxx/system.journal # owner: root # group: systemd-journal user::rwx group::r-- group:wheel:r-x group:adm:r-x mask::r-x other::--- This patch makes sure that the exec bit is not set anymore for the volatile system journals.
* build-sys: allow references to adm group to be omitted (#3150)Franck Bui2016-05-011-5/+18
|
* build-sys: allow references to wheel group to be omittedZbigniew Jędrzejewski-Szmek2016-02-181-4/+15
| | | | https://github.com/systemd/systemd/issues/2492
* tmpfiles: set acls on system.journal explicitlyZbigniew Jędrzejewski-Szmek2015-11-301-0/+2
| | | | https://github.com/systemd/systemd/issues/1397
* tmpfiles: also set acls on /var/log/journalZbigniew Jędrzejewski-Szmek2015-11-301-0/+2
| | | | | | | | This way, directories created later for containers or for journald-remote, will be readable by adm & wheel groups by default, similarly to /var/log/journal/%m itself. https://github.com/systemd/systemd/issues/1971
* tmpfiles: don't recursively descend into journal directories in /varLennart Poettering2015-07-091-1/+1
| | | | | | | | | | | | | | | Do so only in /run. We shouldn't alter ACLs for existing files in /var, but only for new files. If the admin made changes to the ACLs they shouls stay in place. We should still do recursive ACL changes for files in /run, since those are not persistent, and will hence lack ACLs on every boot. Also, /var/log/journal might be quit large, /run/log/journal is usually not, hence we should avoid the recursive descending on /var, but not on /run. Fixes #534
* tmpfiles: use ACL magic on journal directoriesZbigniew Jędrzejewski-Szmek2015-01-221-0/+8
|
* build-sys: configure the list of system users, files and directoriesŁukasz Stelmach2014-12-011-0/+34
Choose which system users defined in sysusers.d/systemd.conf and files or directories in tmpfiles.d/systemd.conf, should be provided depending on comile-time configuration.