tmpfiles: Specify access mode for /run/systemd/netif

diff --git a/debian/patches/series b/debian/patches/series
index 02ddee33bb40e4a5d921afdb148444456d3466d9..d7320cbdbd01a2b87bbe559a08235b3bf1ed5cbe 100644 (file)
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -3,6 +3,7 @@ timesync-changes-type-of-drift_freq-to-int64_t.patch
 sleep-fix-one-more-printf-format-of-a-fiemap-field.patch
 basic-add-missing-comma-in-raw_clone-assembly-for-sparc.patch
 bus-util-make-log-level-lower-in-request_name_destroy_cal.patch
+tmpfiles-specify-access-mode-for-run-systemd-netif.patch
 debian/Use-Debian-specific-config-files.patch
 debian/don-t-try-to-start-autovt-units-when-not-running-wit.patch
 debian/Make-logind-hostnamed-localed-timedated-D-Bus-activa.patch

diff --git a/debian/patches/tmpfiles-specify-access-mode-for-run-systemd-netif.patch b/debian/patches/tmpfiles-specify-access-mode-for-run-systemd-netif.patch
new file mode 100644 (file)
index 0000000..d566f12
--- /dev/null
+++ b/debian/patches/tmpfiles-specify-access-mode-for-run-systemd-netif.patch
@@ -0,0 +1,30 @@
+From: Yu Watanabe <watanabe.yu+github@gmail.com>
+Date: Mon, 25 Jun 2018 14:56:49 +0900
+Subject: tmpfiles: specify access mode for /run/systemd/netif
+
+This partially reverts 2af767729489f6baa98a2641b2007acab44ed353.
+As the directories are certainly readable and not-writable by
+non-privileged users.
+
+(cherry picked from commit 400d8461381c5748a97fccb8a022a20f40063a7d)
+---
+ tmpfiles.d/systemd.conf.m4 | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/tmpfiles.d/systemd.conf.m4 b/tmpfiles.d/systemd.conf.m4
+index 0992f74..120e42a 100644
+--- a/tmpfiles.d/systemd.conf.m4
++++ b/tmpfiles.d/systemd.conf.m4
+@@ -17,9 +17,9 @@ d /run/systemd/users 0755 root root -
+ d /run/systemd/machines 0755 root root -
+ d /run/systemd/shutdown 0755 root root -
+ m4_ifdef(`ENABLE_NETWORKD',
+-d /run/systemd/netif - - - -
+-d /run/systemd/netif/links - - - -
+-d /run/systemd/netif/leases - - - -
++d /run/systemd/netif 0755 - - -
++d /run/systemd/netif/links 0755 - - -
++d /run/systemd/netif/leases 0755 - - -
+ )m4_dnl
+ 
+ d /run/log 0755 root root -