Am 04.08.2014 um 21:49 schrieb Viktor Dukhovni:
> On Mon, Aug 04, 2014 at 09:18:27PM +0200, li...@rhsoft.net wrote:
> 
>> why is "access denied" here reported?
> 
> The "/run" directory is on many systems restricted to root.
> Your permissions checks start one level lower and are tested
> as "root".

on Fedora /var/run is a symlink to /run/ and is in fact
a tmpfs while subfolders which are created via tmpfiles.d

lrwxrwxrwx 1 root root 6 2012-06-12 17:22 /var/run -> ../run

given that mysqld is started as user "mysql" (without
drop privileges, really started as that user)  and creates
it's pidfiles in /run/mysqld that's not the reason

[root@testserver:~]$ cat /usr/lib/tmpfiles.d/mysql.conf
d /run/mysqld 0755 mysql mysql -

>> [root@testserver:~]$ stat /run/clamav-milter/
>>   File: '/run/clamav-milter/'
>>   Size: 60              Blocks: 0          IO Block: 4096   directory
>> Device: 11h/17d Inode: 585885      Links: 2
>> Access: (0755/drwxr-xr-x)  Uid: (  109/ clamilt)   Gid: (  106/ clamilt)
>> Access: 2014-08-04 21:13:24.469625838 +0200
>> Modify: 2014-08-04 21:07:45.177892263 +0200
>> Change: 2014-08-04 21:12:32.632279822 +0200
>>  Birth: -
>>
>> [root@testserver:~]$ stat /run/clamav-milter/clamav-milter.socket
>>   File: '/run/clamav-milter/clamav-milter.socket'
>>   Size: 0               Blocks: 0          IO Block: 4096   socket
>> Device: 11h/17d Inode: 593875      Links: 1
>> Access: (0644/srw-r--r--)  Uid: (  109/ clamilt)   Gid: (  106/ clamilt)
>> Access: 2014-08-04 21:07:45.177892263 +0200
>> Modify: 2014-08-04 21:07:45.177892263 +0200
>> Change: 2014-08-04 21:07:45.177892263 +0200

Reply via email to