[systemd-devel] generators, private /tmp

[James Muir (jamesmui)]

> > Hi everyone,
> >
> > The system manager (as of v253) executes generators in a sandbox with a fresh tmpfs mount on /tmp:
> >
> >   https://github.com/systemd/systemd/blob/a526b9ddfc03a290f20a65c0a73792e73029f1b8/src/core/manager.c#L4274
> >
> > Looking at the code, it appears that there is no way to disable that using, say, an environment variable or a config file setting.
> >
> > Is that correct?
>
> Yes.
>
> Generators run during earliest boot, where /tmp/ is quite likely not
> mounted yet, hence generators do not have access to the system's /tmp/
> and get a transient one.
>

Thanks for your reply.

Is my second statement also correct?

i.e. is there no way to prevent mounting a private /tmp when executing generators using something like an environment variable or config setting?

I see the condition !MANAGER_IS_TEST_RUN(m) guards the flag FORK_PRIVATE_TMP but that seems to be just for testing.

-James M

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/systemd-devel/attachments/20241120/674bcba8/attachment.htm>