Systemd/tmpfiles.d
Zbigniew Jędrzejewski-Szmek d34cd37490 Make PrivateTmp dirs also inaccessible from the outside
Currently, PrivateTmp=yes means that the service cannot see the /tmp
shared by rest of the system and is isolated from other services using
PrivateTmp, but users can access and modify /tmp as seen by the
service.

Move the private /tmp and /var/tmp directories into a 0077-mode
directory. This way unpriviledged users on the system cannot see (or
modify) /tmp as seen by the service.
2013-03-20 14:08:41 -04:00
..
legacy.conf
Makefile
systemd.conf tmpfiles: do not make /run/nologin executable 2013-01-19 02:11:41 +01:00
tmp.conf Make PrivateTmp dirs also inaccessible from the outside 2013-03-20 14:08:41 -04:00
x11.conf