Sunil Mohan Adapa a4505978ad

Enable private tmp and join namespaces for the two daemons ...

- Earlier PrivateTmp=no is set freedombox-privileged.service in
4140d3b4444d2fd55ac682d066fd859cb2f034b5 and the fix was not properly tested.
Similar change was needed in plinth.service and it was not done.

- Complete the fix but this time enable private tmp and join namespaces for the
two daemons.

- This will cause issues with file uploading when plinth is run from command
line (for development purposes). This will be addressed separately.

Tests:

- Apply the change and reload systemd and restart service. Don't run plinth on
command line and run it as service.

  - Uploading libraries to kiwix works

  - Uploading backup tarballs works.

  - Uploading TiddlyWiki and Feature Wiki wiki files works.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>

2025-10-27 20:09:46 -04:00

..

etc

actions: Drop sudo based privileged actions

2025-09-05 20:23:45 +05:30

usr

Enable private tmp and join namespaces for the two daemons

2025-10-27 20:09:46 -04:00