Re: generators, private /tmp

[Lennart Poettering <lennart@xxxxxxxxxxxxxx>]

On Mi, 20.11.24 21:42, James Muir (jamesmui) (jamesmui@xxxxxxxxx) wrote:

> > > Hi everyone,
> > >
> > > The system manager (as of v253) executes generators in a sandbox with a fresh tmpfs mount on /tmp:
> > >
> > >   https://github.com/systemd/systemd/blob/a526b9ddfc03a290f20a65c0a73792e73029f1b8/src/core/manager.c#L4274
> > >
> > > Looking at the code, it appears that there is no way to disable that using, say, an environment variable or a config file setting.
> > >
> > > Is that correct?
> >
> > Yes.
> >
> > Generators run during earliest boot, where /tmp/ is quite likely not
> > mounted yet, hence generators do not have access to the system's /tmp/
> > and get a transient one.
> >
>
> Thanks for your reply.
>
> Is my second statement also correct?
 >
> i.e. is there no way to prevent mounting a private /tmp when executing generators using something like an environment variable or config setting?

There is none.

Lennart

--
Lennart Poettering, Berlin