[pulseaudio-discuss] [PATCH v2] systemd: disable socket activation for root

Tanu Kaskinen tanuk at iki.fi
Thu Feb 9 20:35:53 UTC 2017

We disallow autospawning for root, but when using systemd socket
activation to start pulseaudio, that replaces the autospawning
mechanism, and there was no similar "root protection" in socket
activation. This patch disables the socket activation for root.
 src/daemon/systemd/user/pulseaudio.socket | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/daemon/systemd/user/pulseaudio.socket b/src/daemon/systemd/user/pulseaudio.socket
index 332ece893..c428b9b3b 100644
--- a/src/daemon/systemd/user/pulseaudio.socket
+++ b/src/daemon/systemd/user/pulseaudio.socket
@@ -6,5 +6,20 @@ Priority=6
+# We don't want to enable socket activation for root, because alsa device
+# handover doesn't work between root and normal users.
+# Using ExecStartPre is not quite ideal, because the unit state becomes
+# "failed", which can make people think that something went wrong, even though
+# this is normal behaviour. A better solution would be to use
+# ConditionCapability=!CAP_SYS_ADMIN, but that didn't work for some reason on
+# a Debian system (in February 2017), so it seems best to not use that. There's
+# a bug report about the capability check failure:
+# https://github.com/systemd/systemd/issues/5296
+# A request has been submitted for a more straightforward way to make units
+# conditional based on the user: https://github.com/systemd/systemd/issues/5187
+ExecStartPre=/bin/sh -c '/usr/bin/test $(/usr/bin/whoami) != "root"'

More information about the pulseaudio-discuss mailing list