Watch
0
0
Fork
You've already forked hyperhive
0

swarm-logs-auth: PrivateTmp=disconnected, as DynamicUser implied

DynamicUser implies PrivateTmp=disconnected (systemd.exec(5)), a tmpfs
of the unit's own rather than a private directory reachable from the
host namespace. The explicit setting now matches what the unit ran
with before it moved to a static user.

Refs #5235
This commit is contained in:
atlas 2026-10-14 16:57:45 +02:00 • committed by mara
commit 065933b83e

View file

@ -414,7 +414,7 @@ in
SyslogIdentifier = logsAuthUnit;
ProtectSystem = "strict";
ProtectHome = true;
PrivateTmp = true;
PrivateTmp = "disconnected";
PrivateDevices = true;
NoNewPrivileges = true;
RestrictSUIDSGID = true;