Merge pull request #29343 from DaanDeMeyer/tmp

Use a subdirectory of /run/systemd for PrivateDevices=

diff --cc src/core/namespace.c
index f0521e80703800c641ee24609ecc3e450aab0c6c,a0471ac8884bf85b9ca7fe06092a124d2c18b8d7..206453f30f9cf45c3f276a09fe14f04e1a4198ac
--- 1/src/core/namespace.c
--- 2/src/core/namespace.c
+++ b/src/core/namespace.c
@@@ -1902,9 -1896,10 +1928,9 @@@ static int apply_mounts
                                  break;
                          }
  
-                         r = apply_one_mount(root, m, mount_image_policy, extension_image_policy, ns_info);
+                         r = apply_one_mount(root, m, mount_image_policy, extension_image_policy, ns_info, scope);
                          if (r < 0) {
 -                                if (error_path && mount_entry_path(m))
 -                                        *error_path = strdup(mount_entry_path(m));
 +                                mount_entry_path_debug_string(root, m, error_path);
                                  return r;
                          }