[systemd-devel] [PATCH 3/3] units: Ubuntu has different mount options for /var/lock & /var/run

[Tollef Fog Heen]

]] Kay Sievers 

| On Mon, Oct 25, 2010 at 15:24, Andrew Edmunds
| <Andrew.Edmunds at yahoo.com.au> wrote:
| 
| > +Where=/var/lock
| > +Type=tmpfs
| > +m4_dnl
| > +m4_ifdef(`TARGET_UBUNTU',
| > +`Options=nosuid,nodev,noexec',
| > +`Options=mode=775,gid=lock')
| 
| Are you sure that /var/lock is world-writable? That's something that
| should be fixed on Ubuntu, I guess. We have far too many directories
| already where untrusted users can drop/hide crap, and consume RAM with
| tmpfs.

They are like that on Debian at least, and I would assume Ubuntu has the
same permissions.  Sure, it should be fixed, but you can't just change
the default, it will cause problems.

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are