diff options
| author | Lennart Poettering <lennart@poettering.net> | 2021-01-20 22:28:30 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2021-01-20 22:39:53 +0100 |
| commit | fe239c7d7d6227209234100f4e0a36dd952a5587 (patch) | |
| tree | 49c49b3a2d9cd02dae82fba967f78e949ddbfc53 | |
| parent | 09872a6e1a88d68013653d7299df96d5e542bfe6 (diff) | |
| download | systemd-fe239c7d7d6227209234100f4e0a36dd952a5587.tar.gz | |
portabled: update profiles to current semantics
MountAPIVFS= implicitly mounts /run as tmpfs now, no need to do this
explicitly.
The notification socket is now implicitly mounted too, if NotifyAccess=
and RootImage=/RootDirectory= are used together.
| -rw-r--r-- | src/portable/profile/default/service.conf | 2 | ||||
| -rw-r--r-- | src/portable/profile/nonetwork/service.conf | 2 | ||||
| -rw-r--r-- | src/portable/profile/strict/service.conf | 2 | ||||
| -rw-r--r-- | src/portable/profile/trusted/service.conf | 1 |
4 files changed, 0 insertions, 7 deletions
diff --git a/src/portable/profile/default/service.conf b/src/portable/profile/default/service.conf index 792be50229..230aa60781 100644 --- a/src/portable/profile/default/service.conf +++ b/src/portable/profile/default/service.conf @@ -2,8 +2,6 @@ [Service] MountAPIVFS=yes -TemporaryFileSystem=/run -BindReadOnlyPaths=/run/systemd/notify BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout BindReadOnlyPaths=/etc/machine-id BindReadOnlyPaths=/etc/resolv.conf diff --git a/src/portable/profile/nonetwork/service.conf b/src/portable/profile/nonetwork/service.conf index c81cebe03f..cd7f75c2e3 100644 --- a/src/portable/profile/nonetwork/service.conf +++ b/src/portable/profile/nonetwork/service.conf @@ -2,8 +2,6 @@ [Service] MountAPIVFS=yes -TemporaryFileSystem=/run -BindReadOnlyPaths=/run/systemd/notify BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout BindReadOnlyPaths=/etc/machine-id BindReadOnlyPaths=/run/dbus/system_bus_socket diff --git a/src/portable/profile/strict/service.conf b/src/portable/profile/strict/service.conf index d10fb5a1e8..f924e1096f 100644 --- a/src/portable/profile/strict/service.conf +++ b/src/portable/profile/strict/service.conf @@ -2,8 +2,6 @@ [Service] MountAPIVFS=yes -TemporaryFileSystem=/run -BindReadOnlyPaths=/run/systemd/notify BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout BindReadOnlyPaths=/etc/machine-id DynamicUser=yes diff --git a/src/portable/profile/trusted/service.conf b/src/portable/profile/trusted/service.conf index 9a6af70b93..cb859c4e27 100644 --- a/src/portable/profile/trusted/service.conf +++ b/src/portable/profile/trusted/service.conf @@ -2,6 +2,5 @@ [Service] MountAPIVFS=yes -BindPaths=/run BindReadOnlyPaths=/etc/machine-id BindReadOnlyPaths=/etc/resolv.conf |