Tom Horsley writes:
On Mon, 14 Jan 2013 20:38:41 -0500 Sam Varshavchik wrote: > lrwxrwxrwx. 1 root root 11 Apr 19 2011 /var/www -> ../home/www > > But if this caused some unfathomable problem with systemd's PrivateTmp, I'd > expect apache to barf, instead of systemd whining. I did find something that objected to symlinks for some obscure security reason once, I also move (part of) /var/www, but I do it with a "bind" mount in my fstab:
Ok, I can buy that theory. But, if this were the case, and this is where I am having a disconnect, why is /systemd/ giving a frack about /var/www? All systemd, allegedly, knows about is ExecStart, which tells it to execute some binary blob called "/usr/sbin/httpd", with the arguments "-k" and "start". That's it.
And, I'm now fairly sure that this has nothing to do with /var/www, since it looks like ntpd is also failing to start with PrivateTmp.
# systemctl status ntpd.service ntpd.service - Network Time Service Loaded: loaded (/usr/lib/systemd/system/ntpd.service; enabled) Active: failed (Result: exit-code) since Mon, 14 Jan 2013 22:09:46 -0500; 49s ago Process: 15004 ExecStart=/usr/sbin/ntpd -u ntp:ntp $OPTIONS (code=exited, status=226/NAMESPACE) CGroup: name=systemd:/system/ntpd.serviceAnd, unsurprisingly, removing PrivateTmp from ntpd.service got it running again, with no further hassles.
Taking an inventory of everything that I have installed, only httpd.service and ntpd.service have PrivateTmp=true. Which is now off. There are a few others, but they're disabled/not used. I think that PrivateTmp=true is now completely broken. Originally, it broke named-chroot.service, until the reluctant admission that it did, indeed, broke it, so it was taken out of named-chroot.service, and kept only in named.service. But, looks like it now broke two more services.
Attachment:
pgpW5eWeiX1x8.pgp
Description: PGP signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
