Sunil Mohan Adapa 4140d3b444

privileged: Don't isolate /var/tmp/ for privileged daemon ...

- Files from web service are uploaded to /var/tmp/ directory. They need to
accessible to privileged daemon to that it can move them to a target location.
So, if /var/tmp is isolated for privileged daemon, it can't see those files as a
separate tmpfs filesystem is mounted on that folder.

- Ideally, we should have PrivateTmp=yes and
JoinsNameSpacesOf=freedombox-privileged.service set on plinth.service. However,
this requires further changes to the way developer execution is done command
line. This is done in future.

Tests:

- Uploading a backup works.

- Uploading a kiwix archive works.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Veiko Aasa <veiko17@disroot.org>

2025-09-04 10:29:49 +03:00

..

etc

apache: Make all directory listings more mobile friendly

2025-07-18 16:32:41 -07:00

usr

privileged: Don't isolate /var/tmp/ for privileged daemon

2025-09-04 10:29:49 +03:00