How secure are nested/indirect file access restrictions?

2017-01-10 Thread Andreas Born
Hello! Let's assume the following file permissions: drwxr-xr-x root root /srv drwxr-x--- root srv-www /srv/www drwxrws--x root dev-1/srv/www/dom-1 -rw-rw-r-- usr-1 dev-1/srv/www/dom-1/index.php While the html subfolder perms allow write access only to root and users within dev-1,

Re: systemd and initial tmpfs mounts

2016-12-11 Thread Andreas Born
Michael Biebl wrote: > Am 08.12.2016 um 13:32 schrieb Andreas Born: >> [...] >> /lib/systemd/system/tmp.mount as unit file for /tmp, but where are the other >> tmpfs mounts configured? Which part of systemd is responsible for them? [...] > > systemd has hard-coded def

Re: systemd automount - Parameter TimeoutIdleSec ignored?

2016-12-11 Thread Andreas Born
Michael Biebl wrote: > Am 08.12.2016 um 13:33 schrieb Andreas Born: >> Hi all, >> I need a device to be automatically mounted on access and unmounted when >> being >> idle. My /etc/fstab entry: >> >> /dev/sdc1 /mnt/auto ext4 defaults,noauto,x-systemd.a

systemd automount - Parameter TimeoutIdleSec ignored?

2016-12-08 Thread Andreas Born
Hi all, I need a device to be automatically mounted on access and unmounted when being idle. My /etc/fstab entry: /dev/sdc1 /mnt/auto ext4 defaults,noauto,x-systemd.automount,\ x-systemd.idle-timeout=10 0 0 Systemd correctly creates the mnt-auto.mount und mnt-auto.automount unit files and

systemd and initial tmpfs mounts

2016-12-08 Thread Andreas Born
Hi all, earlier in SysV there was /etc/default/tmpfs to configure the initial mounts like /run, /run/lock, /dev/shm, /tmp and so on. Now with systemd there is /lib/systemd/system/tmp.mount as unit file for /tmp, but where are the other tmpfs mounts configured? Which part of systemd is responsible