tmpfiles.d/systemd.conf.in

   1 #  This file is part of systemd.
   2 #
   3 #  systemd is free software; you can redistribute it and/or modify it
   4 #  under the terms of the GNU Lesser General Public License as published by
   5 #  the Free Software Foundation; either version 2.1 of the License, or
   6 #  (at your option) any later version.
   7
   8 # See tmpfiles.d(5) for details
   9
  10 d /run/user 0755 root root -
  11 {% if ENABLE_UTMP %}
  12 F! /run/utmp 0664 root utmp -
  13 {% endif %}
  14
  15 d /run/systemd/ask-password 0755 root root -
  16 d /run/systemd/seats 0755 root root -
  17 d /run/systemd/sessions 0755 root root -
  18 d /run/systemd/users 0755 root root -
  19 d /run/systemd/machines 0755 root root -
  20 d /run/systemd/shutdown 0755 root root -
  21
  22 d /run/log 0755 root root -
  23
  24 z /run/log/journal 2755 root systemd-journal - -
  25 Z /run/log/journal/%m ~2750 root systemd-journal - -
  26 {% if HAVE_ACL %}
  27 {% if ENABLE_ADM_GROUP and ENABLE_WHEEL_GROUP %}
  28 a+ /run/log/journal    - - - - d:group::r-x,d:group:adm:r-x,d:group:wheel:r-x,group::r-x,group:adm:r-x,group:wheel:r-x
  29 a+ /run/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x,group:adm:r-x,group:wheel:r-x
  30 a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--,group:wheel:r--
  31 {% elif ENABLE_ADM_GROUP %}
  32 a+ /run/log/journal    - - - - d:group::r-x,d:group:adm:r-x,group::r-x,group:adm:r-x
  33 a+ /run/log/journal/%m - - - - d:group:adm:r-x,group:adm:r-x
  34 a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--
  35 {% elif ENABLE_WHEEL_GROUP %}
  36 a+ /run/log/journal    - - - - d:group::r-x,d:group:wheel:r-x,group::r-x,group:wheel:r-x
  37 a+ /run/log/journal/%m - - - - d:group:wheel:r-x,group:wheel:r-x
  38 a+ /run/log/journal/%m/*.journal* - - - - group:wheel:r--
  39 {% endif %}
  40 {% endif %}
  41
  42 z /var/log/journal 2755 root systemd-journal - -
  43 z /var/log/journal/%m 2755 root systemd-journal - -
  44 z /var/log/journal/%m/system.journal 0640 root systemd-journal - -
  45 {% if HAVE_ACL %}
  46 {% if ENABLE_ADM_GROUP and ENABLE_WHEEL_GROUP %}
  47 a+ /var/log/journal    - - - - d:group::r-x,d:group:adm:r-x,d:group:wheel:r-x,group::r-x,group:adm:r-x,group:wheel:r-x
  48 a+ /var/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x,group:adm:r-x,group:wheel:r-x
  49 a+ /var/log/journal/%m/system.journal - - - - group:adm:r--,group:wheel:r--
  50 {% elif ENABLE_ADM_GROUP %}
  51 a+ /var/log/journal    - - - - d:group::r-x,d:group:adm:r-x,group::r-x,group:adm:r-x
  52 a+ /var/log/journal/%m - - - - d:group:adm:r-x,group:adm:r-x
  53 a+ /var/log/journal/%m/system.journal - - - - group:adm:r--
  54 {% elif ENABLE_WHEEL_GROUP %}
  55 a+ /var/log/journal    - - - - d:group::r-x,d:group:wheel:r-x,group::r-x,group:wheel:r-x
  56 a+ /var/log/journal/%m - - - - d:group:wheel:r-x,group:wheel:r-x
  57 a+ /var/log/journal/%m/system.journal - - - - group:wheel:r--
  58 {% endif %}
  59 {% endif %}
  60
  61 d /var/lib/systemd 0755 root root -
  62 d /var/lib/systemd/coredump 0755 root root 3d
  63
  64 d /var/lib/private 0700 root root -
  65 d /var/log/private 0700 root root -
  66 d /var/cache/private 0700 root root -
  67
  68 {% if ENABLE_EFI %}
  69 # Copy sd-stub provided PCR signature and public key file from initrd into /run/, so that it will survive the initrd stage
  70 C /run/systemd/tpm2-pcr-signature.json 0444 root root - /.extra/tpm2-pcr-signature.json
  71 C /run/systemd/tpm2-pcr-public-key.pem 0444 root root - /.extra/tpm2-pcr-public-key.pem
  72 {% endif %}