-
-
Notifications
You must be signed in to change notification settings - Fork 4.2k
Closed
Labels
bug 🐛Programming errors, that need preferential fixingProgramming errors, that need preferential fixingpid1
Description
Submission type
Bug report
systemd version the issue has been seen with
235
Used distribution
Arch Linux
Unexpected behaviour you saw
RuntimeDirectory= and similar directives, e.g. CacheDirectory= and LogsDirectory=, override the directives InaccessiblePaths=, ReadOnlyPaths=, and ReadWritePaths=. This was introduced in version 235; bug cannot be replicated in version 234.
In case of bug report: Steps to reproduce the problem
Given a service file that writes to /var/log/test:
Does not work
InaccessiblePaths=/
Works, InaccessiblePaths= is overridden by RuntimeDirectory=
InaccessiblePaths=/
RuntimeDirectory=test
Does not work, CacheDirectory= overrides ReadWritePaths=
CacheDirectory=test
ProtectSystem=strict
ReadWritePaths=/var/log/test
Does not work, similar to case above
RuntimeDirectory=test
ProtectSystem=strict
ReadWritePaths=/var/log/test
Works because LogsDirectory= whitelists /var/log/test
LogsDirectory=test
ProtectSystem=strict
ReadWritePaths=/var/log/test
Works because ReadWritePaths= is not overridden
ProtectSystem=strict
ReadWritePaths=/var/log/test
Metadata
Metadata
Assignees
Labels
bug 🐛Programming errors, that need preferential fixingProgramming errors, that need preferential fixingpid1