<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="en-SE" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We, at Axis, have a monolithic operating system backed by a platform. There are teams behind the services making up the operating system and we have quite many services. We have been investigating sandboxing these services
and of course systemd sandboxing directives are a way to go. Problem is that it is not realistic for us to expect teams to be on top of the directives and apply the right ones they need (and keep them updated). There shines the portable services for us with
it’s “profiles”. We are trying to sandbox these services while giving them some host access. There shined for example how the default profile is set up by giving dbus access (binding dbus system socket to a portable service). We would like to create a base
runtime and expect services to use the base runtime, still giving them the option of overriding the runtime. There shined the stackable services with latest “extension” support. All and all it fits our use case very well.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I am aware that portable services is still enhancing but who out there is using it and I am curious about their use case. (Sorry, couldn’t wait for spring in Berlin).
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Seems like DynamicUsers is part of the default profile and DynamicUsers is a good thing. Seems like systemd creates a username as the same name as the portable service. Does it work with username based dbus policies?
Is it that we need to be very careful regarding who can start a portable service in case they re-use service name to go around dbus rules (vs who can edit /etc/passwd).
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks in advance<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Umut<o:p></o:p></span></p>
</div>
</body>
</html>