fix socket path creation

based on this bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915834

It seems that setting the Temp file system to ro overly restricts access
to it such that other applications (like ssh), can't function properly.
That seems like a error to fix in systemd to me, but regardless we
obviously cant use TempDirectory=/path:ro if its going to impact other
applications like that.

Instead specify a specific RuntimeDirectory that systemd can clean up
for us, and modify irqbalance and irqbalance-ui to create the comms
socket there.

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>
This commit is contained in:
Neil Horman 2019-01-14 09:25:49 -05:00 committed by Neil Horman
parent d602fbd681
commit f5ca2eb481
3 changed files with 3 additions and 3 deletions

View file

@ -158,7 +158,7 @@ extern unsigned int log_mask;
#endif /* HAVE_LIBSYSTEMD */
#define SOCKET_PATH "irqbalance"
#define SOCKET_TMPFS "/var/run"
#define SOCKET_TMPFS "/run/irqbalance/"
#endif /* __INCLUDE_GUARD_IRQBALANCE_H_ */

View file

@ -12,7 +12,7 @@ NoNewPrivileges=yes
ReadOnlyPaths=/
ReadWritePaths=/proc/irq
RestrictAddressFamilies=AF_UNIX
TemporaryFileSystem=/run:ro
RuntimeDirectory=irqbalance/
[Install]
WantedBy=multi-user.target

View file

@ -8,7 +8,7 @@
#include <glib-unix.h>
#define SOCKET_PATH "irqbalance"
#define SOCKET_TMPFS "/var/run"
#define SOCKET_TMPFS "/run/irqbalance"
#define STATS "stats"
#define SET_SLEEP "settings sleep "