2013-04-13 13:09:53 +02:00
|
|
|
From: Frederic Crozat <fcrozat@suse.com>
|
|
|
|
Date: Wed, 7 Dec 2011 15:15:07 +0000
|
|
|
|
Subject: Fix /run/lock directories permissions to follow openSUSE policy
|
|
|
|
|
|
|
|
disable /var/lock/{subsys,lockdev} and change default permissions on
|
|
|
|
/var/lock (bnc#733523).
|
|
|
|
---
|
2015-02-13 10:43:21 +01:00
|
|
|
tmpfiles.d/legacy.conf | 7 ++++---
|
2013-04-13 13:09:53 +02:00
|
|
|
1 file changed, 4 insertions(+), 3 deletions(-)
|
|
|
|
|
2015-02-13 10:43:21 +01:00
|
|
|
Index: systemd-218/tmpfiles.d/legacy.conf
|
|
|
|
===================================================================
|
|
|
|
--- systemd-218.orig/tmpfiles.d/legacy.conf
|
|
|
|
+++ systemd-218/tmpfiles.d/legacy.conf
|
|
|
|
@@ -10,13 +10,14 @@
|
2013-04-13 13:09:53 +02:00
|
|
|
# These files are considered legacy and are unnecessary on legacy-free
|
|
|
|
# systems.
|
|
|
|
|
|
|
|
-d /run/lock 0755 root root -
|
2015-02-13 10:43:21 +01:00
|
|
|
+# changed for openSUSE: only /run/lock should be available.
|
2013-04-13 13:09:53 +02:00
|
|
|
+d /run/lock 0775 root lock -
|
2015-02-13 10:43:21 +01:00
|
|
|
L /var/lock - - - - ../run/lock
|
2013-04-13 13:09:53 +02:00
|
|
|
|
|
|
|
# /run/lock/subsys is used for serializing SysV service execution, and
|
|
|
|
# hence without use on SysV-less systems.
|
|
|
|
|
|
|
|
-d /run/lock/subsys 0755 root root -
|
|
|
|
+#d /run/lock/subsys 0755 root root -
|
|
|
|
|
|
|
|
# /run/lock/lockdev is used to serialize access to tty devices via
|
|
|
|
# LCK..xxx style lock files, For more information see:
|
2015-02-13 10:43:21 +01:00
|
|
|
@@ -24,7 +25,7 @@ d /run/lock/subsys 0755 root root -
|
2013-04-13 13:09:53 +02:00
|
|
|
# On modern systems a BSD file lock is a better choice if
|
|
|
|
# serialization is needed on those devices.
|
|
|
|
|
|
|
|
-d /run/lock/lockdev 0775 root lock -
|
|
|
|
+#d /run/lock/lockdev 0775 root lock -
|
|
|
|
|
|
|
|
# /forcefsck, /fastboot and /forcequotecheck are deprecated in favor of the
|
|
|
|
# kernel command line options 'fsck.mode=force', 'fsck.mode=skip' and
|