44 lines
1.4 KiB
Diff
44 lines
1.4 KiB
Diff
From f58c5ced373c2532b5cc44ba2e0c3a28b41472f2 Mon Sep 17 00:00:00 2001
|
|
From: Jan Synacek <jsynacek@redhat.com>
|
|
Date: Tue, 15 May 2018 09:24:20 +0200
|
|
Subject: [PATCH] Avoid /tmp being mounted as tmpfs without the user's
|
|
will
|
|
|
|
Ensure PrivateTmp doesn't require tmpfs through tmp.mount, but rather
|
|
adds an After relationship.
|
|
|
|
Resolves: #1578772
|
|
|
|
---
|
|
src/core/unit.c | 13 +++++++------
|
|
1 file changed, 7 insertions(+), 6 deletions(-)
|
|
|
|
diff --git a/src/core/unit.c b/src/core/unit.c
|
|
index 10e314f..bb4836a 100644
|
|
--- a/src/core/unit.c
|
|
+++ b/src/core/unit.c
|
|
@@ -1036,13 +1036,14 @@ int unit_add_exec_dependencies(Unit *u, ExecContext *c) {
|
|
return 0;
|
|
|
|
if (c->private_tmp) {
|
|
- const char *p;
|
|
|
|
- FOREACH_STRING(p, "/tmp", "/var/tmp") {
|
|
- r = unit_require_mounts_for(u, p, UNIT_DEPENDENCY_FILE);
|
|
- if (r < 0)
|
|
- return r;
|
|
- }
|
|
+ r = unit_add_dependency_by_name(u, UNIT_AFTER, "tmp.mount", true, UNIT_DEPENDENCY_FILE);
|
|
+ if (r < 0)
|
|
+ return r;
|
|
+
|
|
+ r = unit_require_mounts_for(u, "/var/tmp", UNIT_DEPENDENCY_FILE);
|
|
+ if (r < 0)
|
|
+ return r;
|
|
|
|
r = unit_add_dependency_by_name(u, UNIT_AFTER, SPECIAL_TMPFILES_SETUP_SERVICE, true, UNIT_DEPENDENCY_FILE);
|
|
if (r < 0)
|
|
--
|
|
2.19.1
|
|
|