From 174e04cb6c268ce32135e8e70194b3ee42fb6f9d Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Aug 22 2017 14:57:48 +0000 Subject: post: Re-instate systemd ProtectHome/ProtectSystem and PrivateTmp This reverts https://pagure.io/fedora-atomic/c/6a8ee9a65491d5a37c9177a6d8a709a4ecb3baf7?branch=master I've tested that a rebase of F26AH works with the latest systemd there; for example it looks like `chronyd.service` uses `PrivateTmp=yes` and `ProtectSystem=full`, and it's running fine. --- diff --git a/treecompose-post.sh b/treecompose-post.sh index 5bb7034..2aa1068 100755 --- a/treecompose-post.sh +++ b/treecompose-post.sh @@ -4,6 +4,3 @@ set -xeuo pipefail # Work around https://bugzilla.redhat.com/show_bug.cgi?id=1265295 echo 'Storage=persistent' >> /etc/systemd/journald.conf - -# Work around https://github.com/systemd/systemd/issues/4082 -find /usr/lib/systemd/system/ -type f -exec sed -i -e '/^PrivateTmp=/d' -e '/^Protect\(Home\|System\)=/d' {} \;