Sunil Mohan Adapa a4505978ad

Enable private tmp and join namespaces for the two daemons ...

- Earlier PrivateTmp=no is set freedombox-privileged.service in
4140d3b4444d2fd55ac682d066fd859cb2f034b5 and the fix was not properly tested.
Similar change was needed in plinth.service and it was not done.

- Complete the fix but this time enable private tmp and join namespaces for the
two daemons.

- This will cause issues with file uploading when plinth is run from command
line (for development purposes). This will be addressed separately.

Tests:

- Apply the change and reload systemd and restart service. Don't run plinth on
command line and run it as service.

  - Uploading libraries to kiwix works

  - Uploading backup tarballs works.

  - Uploading TiddlyWiki and Feature Wiki wiki files works.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>

2025-10-27 20:09:46 -04:00

..

lib/systemd/system

Enable private tmp and join namespaces for the two daemons

2025-10-27 20:09:46 -04:00

share/dbus-1/system.d

*: Update remaining misc files to use SPDX license identifier

2020-02-19 14:40:32 +02:00