From fd3b2070111e7830721ec9204f8fcdd7baac9074 Mon Sep 17 00:00:00 2001 From: Grimmauld Date: Tue, 8 Jul 2025 22:02:46 +0200 Subject: [PATCH] units/systemd-tmpfiles-setup.service: explicitly set RestrictSUIDSGID=no The tmpfiles service is used to set file permissions, e.g. for setting suid bit on the journal log directory [1]. [1] https://github.com/systemd/systemd/blob/48e0f7bc2f94e74d15eed5c9e70b1c0269a495ec/tmpfiles.d/systemd.conf.in#L24-L25 --- units/systemd-tmpfiles-setup.service | 1 + 1 file changed, 1 insertion(+) diff --git a/units/systemd-tmpfiles-setup.service b/units/systemd-tmpfiles-setup.service index b92beb73141..1299b195fe4 100644 --- a/units/systemd-tmpfiles-setup.service +++ b/units/systemd-tmpfiles-setup.service @@ -28,3 +28,4 @@ ImportCredential=login.motd ImportCredential=login.issue ImportCredential=network.hosts ImportCredential=ssh.authorized_keys.root +RestrictSUIDSGID=no -- 2.47.3