[systemd-devel] systemd-timedated: Not possible to set time zone that is a symlink!

Christopher Wong christopher.wong at axis.com
Wed Aug 21 11:12:57 UTC 2019


Hi,

Sorry, for this late reply, vacation and other priorities.

> > I am asking because our system mount /usr/share/zoneinfo as
> > read-only and because of legacy we need to support the user being
> > able to change the TZ string in a tz-file. Installing a symlink that
> > point to such a tz-file will allow us to use the systemd-timedated
> > interface to set time zone. The changeable tz-file (located at
> > /etc/...) can be altered by root and a specific service. Do you see
> > any potential risk by doing so?
> 
> consider turning off the sandboxing features, i.e. add a drop-in that
> turns off ProtectSystem=, ProtectHome= and suchlike.

Just wanted to give feedback that ProtectSystem= and ProtectHome= was turned off already, but we could no longer produce the problem we have seen. So case closed.

BR,
Christopher Wong


More information about the systemd-devel mailing list