Skip to content

Commit fe239c7

Browse files
committed
portabled: update profiles to current semantics
MountAPIVFS= implicitly mounts /run as tmpfs now, no need to do this explicitly. The notification socket is now implicitly mounted too, if NotifyAccess= and RootImage=/RootDirectory= are used together.
1 parent 09872a6 commit fe239c7

File tree

4 files changed

+0
-7
lines changed

4 files changed

+0
-7
lines changed

src/portable/profile/default/service.conf

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@
22

33
[Service]
44
MountAPIVFS=yes
5-
TemporaryFileSystem=/run
6-
BindReadOnlyPaths=/run/systemd/notify
75
BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout
86
BindReadOnlyPaths=/etc/machine-id
97
BindReadOnlyPaths=/etc/resolv.conf

src/portable/profile/nonetwork/service.conf

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@
22

33
[Service]
44
MountAPIVFS=yes
5-
TemporaryFileSystem=/run
6-
BindReadOnlyPaths=/run/systemd/notify
75
BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout
86
BindReadOnlyPaths=/etc/machine-id
97
BindReadOnlyPaths=/run/dbus/system_bus_socket

src/portable/profile/strict/service.conf

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@
22

33
[Service]
44
MountAPIVFS=yes
5-
TemporaryFileSystem=/run
6-
BindReadOnlyPaths=/run/systemd/notify
75
BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout
86
BindReadOnlyPaths=/etc/machine-id
97
DynamicUser=yes

src/portable/profile/trusted/service.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,5 @@
22

33
[Service]
44
MountAPIVFS=yes
5-
BindPaths=/run
65
BindReadOnlyPaths=/etc/machine-id
76
BindReadOnlyPaths=/etc/resolv.conf

0 commit comments

Comments
 (0)