From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 9 Apr 2020 15:15:55 +0000 (+0200)
Subject: Merge pull request #15318 from fbuihuu/inherit-umask-for-user-units
X-Git-Tag: v246-rc1~624
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=611cb82612766f8dc973c02cbd217cf8d84d5d4f;p=thirdparty%2Fsystemd.git

Merge pull request #15318 from fbuihuu/inherit-umask-for-user-units

pid1: by default make user units inherit their umask from the user ma…
---

611cb82612766f8dc973c02cbd217cf8d84d5d4f
diff --cc man/systemd.exec.xml
index 073d331e6d9,dfb8520e118..401233475e0
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@@ -652,36 -652,15 +652,41 @@@ CapabilityBoundingSet=~CAP_B CAP_C</pro
          <term><varname>UMask=</varname></term>
  
          <listitem><para>Controls the file mode creation mask. Takes an access mode in octal notation. See
-         <citerefentry><refentrytitle>umask</refentrytitle><manvolnum>2</manvolnum></citerefentry> for details. Defaults
-         to 0022.</para></listitem>
+         <citerefentry><refentrytitle>umask</refentrytitle><manvolnum>2</manvolnum></citerefentry> for
+         details. Defaults to 0022 for system units. For units of the user service manager the default value
+         is inherited from the user instance (whose default is inherited from the system service manager, and
+         thus also is 0022). Hence changing the default value of a user instance, either via
+         <varname>UMask=</varname> or via a PAM module, will affect the user instance itself and all user
+         units started by the user instance unless a user unit has specified its own
+         <varname>UMask=</varname>.</para></listitem>
        </varlistentry>
  
 +      <varlistentry>
 +        <term><varname>CoredumpFilter=</varname></term>
 +
 +        <listitem><para>Controls which types of memory mappings will be saved if the process dumps core
 +        (using the <filename>/proc/<replaceable>pid</replaceable>/coredump_filter</filename> file). Takes a
 +        whitespace-separated combination of mapping type names or numbers (with the default base 16). Mapping
 +        type names are <constant>private-anonymous</constant>, <constant>shared-anonymous</constant>,
 +        <constant>private-file-backed</constant>, <constant>shared-file-backed</constant>,
 +        <constant>elf-headers</constant>, <constant>private-huge</constant>,
 +        <constant>shared-huge</constant>, <constant>private-dax</constant>, <constant>shared-dax</constant>,
 +        and the special values <constant>all</constant> (all types) and <constant>default</constant> (the
 +        kernel default of <literal><constant>private-anonymous</constant>
 +        <constant>shared-anonymous</constant> <constant>elf-headers</constant>
 +        <constant>private-huge</constant></literal>). See
 +        <citerefentry><refentrytitle>core</refentrytitle><manvolnum>5</manvolnum></citerefentry> for the
 +        meaning of the mapping types. When specified multiple times, all specified masks are ORed. When not
 +        set, or if the empty value is assigned, the inherited value is not changed.</para>
 +
 +        <example>
 +          <title>Add DAX pages to the dump filter</title>
 +
 +          <programlisting>CoredumpFilter=default private-dax shared-dax</programlisting>
 +        </example>
 +        </listitem>
 +      </varlistentry>
 +
        <varlistentry>
          <term><varname>KeyringMode=</varname></term>