From: Grimmauld <Grimmauld@grimmauld.de>
Date: Tue, 8 Jul 2025 20:02:46 +0000 (+0200)
Subject: units/systemd-tmpfiles-setup.service: explicitly set RestrictSUIDSGID=no
X-Git-Tag: v258-rc1~128^2~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fd3b2070111e7830721ec9204f8fcdd7baac9074;p=thirdparty%2Fsystemd.git

units/systemd-tmpfiles-setup.service: explicitly set RestrictSUIDSGID=no

The tmpfiles service is used to set file permissions, e.g. for setting
suid bit on the journal log directory [1].

[1] https://github.com/systemd/systemd/blob/48e0f7bc2f94e74d15eed5c9e70b1c0269a495ec/tmpfiles.d/systemd.conf.in#L24-L25
---

diff --git a/units/systemd-tmpfiles-setup.service b/units/systemd-tmpfiles-setup.service
index b92beb73141..1299b195fe4 100644
--- a/units/systemd-tmpfiles-setup.service
+++ b/units/systemd-tmpfiles-setup.service
@@ -28,3 +28,4 @@ ImportCredential=login.motd
 ImportCredential=login.issue
 ImportCredential=network.hosts
 ImportCredential=ssh.authorized_keys.root
+RestrictSUIDSGID=no