[systemd-devel] disable "InaccessiblePaths" with a dropin

[Reindl Harald]

Am 09.01.20 um 08:33 schrieb Michael Chapman:
> On Thu, 9 Jan 2020, Reindl Harald wrote:
>> Hi
>>
>> deployed http.service contains:
>>
>>  * InaccessiblePaths=-/usr/bin/bash
>>  * InaccessiblePaths=-/usr/bin/dash
>>  * InaccessiblePaths=-/usr/bin/sh
>>
>> now there is one instance where passthru() in a php script is desired
>>
>> /etc/systemd/system/http.service/allow-paths.conf:
>> ReadOnlyPaths=-/usr/bin/bash
>> ReadOnlyPaths=-/usr/bin/dash
>> ReadOnlyPaths=-/usr/bin/sh
>>
>> that don't work - is there a way to disable specific "InaccessiblePaths"
>> from the main unit with a dropin other then clone the whole httpd.service?
> 
> An empty:
> 
>     InaccessiblePaths=
> 
> in the drop-in should do it. In general "list-valued" directives are 
> emptied with a blank value

no, it would disable the other hundret "InaccessiblePaths" too and list
them there is even worse then clone the whole unit and remove the 3 lines