mirror of
https://github.com/systemd/systemd
synced 2024-09-06 08:46:19 +00:00
![Zbigniew Jędrzejewski-Szmek](/assets/img/avatar_default.png)
Various operations done by systemd-tmpfiles may only be safely done at boot (e.g. removal of X lockfiles in /tmp, creation of /run/nologin). Other operations may be done at any point in time (e.g. setting the ownership on /{run,var}/log/journal). This distinction is largely orthogonal to the type of operation. A new switch --unsafe is added, and operations which should only be executed during bootup are marked with an exclamation mark in the configuration files. systemd-tmpfiles.service is modified to use this switch, and guards are added so it is hard to re-start it by mistake. If we install a new version of systemd, we actually want to enforce some changes to tmpfiles configuration immediately. This should now be possible to do safely, so distribution packages can be modified to execute the "safe" subset at package installation time. /run/nologin creation is split out into a separate service, to make it easy to override. https://bugzilla.redhat.com/show_bug.cgi?id=1043212 https://bugzilla.redhat.com/show_bug.cgi?id=1045849
35 lines
1.1 KiB
Plaintext
35 lines
1.1 KiB
Plaintext
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
# See tmpfiles.d(5) for details
|
|
|
|
# These files are considered legacy and are unnecessary on legacy-free
|
|
# systems.
|
|
|
|
d /run/lock 0755 root root -
|
|
|
|
# /run/lock/subsys is used for serializing SysV service execution, and
|
|
# hence without use on SysV-less systems.
|
|
|
|
d /run/lock/subsys 0755 root root -
|
|
|
|
# /run/lock/lockdev is used to serialize access to tty devices via
|
|
# LCK..xxx style lock files, For more information see:
|
|
# http://lists.freedesktop.org/archives/systemd-devel/2011-March/001823.html
|
|
# On modern systems a BSD file lock is a better choice if
|
|
# serialization is needed on those devices.
|
|
|
|
d /run/lock/lockdev 0775 root lock -
|
|
|
|
# /forcefsck, /fastboot and /forcequotecheck are deprecated in favor of the
|
|
# kernel command line options 'fsck.mode=force', 'fsck.mode=skip' and
|
|
# 'quotacheck.mode=force'
|
|
|
|
r! /forcefsck
|
|
r! /fastboot
|
|
r! /forcequotacheck
|