tmpfiles: add ability to mask access mode by pre-existing access mode on files/directories

This way it makes a lot more sense to specify an access mode for "Z"
lines.
This commit is contained in:
Lennart Poettering
2014-06-11 10:14:07 +02:00
parent 1ebab2103d
commit abef3f91ce
2 changed files with 46 additions and 7 deletions
+16
View File
@@ -368,6 +368,22 @@ r! /tmp/.X[0-9]*-lock</programlisting>
ignored for <varname>x</varname>,
<varname>r</varname>, <varname>R</varname>,
<varname>L</varname> lines.</para>
<para>Optionally, if prefixed with
<literal>~</literal> the access mode is masked
based on the already set access bits for
existing file or directories: if the existing
file has all executable bits unset then all
executable bits are removed from the new
access mode, too. Similar, if all read bits
are removed from the old access mode they will
be removed from the new access mode too, and
if all write bits are removed, they will be
removed from the new access mode too. In
addition the sticky/suid/gid bit is removed unless
applied to a directory. This
functionality is particularly useful in
conjunction with <varname>Z</varname>.</para>
</refsect2>
<refsect2>