mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-04-22 10:01:45 +00:00
4140d3b444
- Files from web service are uploaded to /var/tmp/ directory. They need to accessible to privileged daemon to that it can move them to a target location. So, if /var/tmp is isolated for privileged daemon, it can't see those files as a separate tmpfs filesystem is mounted on that folder. - Ideally, we should have PrivateTmp=yes and JoinsNameSpacesOf=freedombox-privileged.service set on plinth.service. However, this requires further changes to the way developer execution is done command line. This is done in future. Tests: - Uploading a backup works. - Uploading a kiwix archive works. Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: Veiko Aasa <veiko17@disroot.org>
23 lines
504 B
Desktop File
23 lines
504 B
Desktop File
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
[Unit]
|
|
Description=FreedomBox Privileged Service
|
|
Documentation=https://wiki.debian.org/FreedomBox/
|
|
# Don't hit the start rate limiting.
|
|
StartLimitIntervalSec=0
|
|
|
|
[Service]
|
|
Type=notify
|
|
ExecStart=/usr/bin/freedombox-privileged
|
|
TimeoutSec=300s
|
|
User=root
|
|
Group=root
|
|
NotifyAccess=main
|
|
# Uploaded files in /var/tmp/ are shared with FreedomBox web service.
|
|
#PrivateTmp=yes
|
|
Restart=on-failure
|
|
# Don't restart too fast
|
|
RestartSec=1
|
|
RestartSteps=3
|
|
RestartMaxDelaySec=5
|