networkd: downgrade error for non-system users/groups to a warning

This reverts (in spirit) "network/tuntap: deny from owning Tun/Tap interfaces",
commit 940441b44c.

Justification similar as in the previous commit. The check is only
partially connected to the intended purpose and breaks backwards compat
without a sufficient reason.

Alternative fix for #37279.
This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2026-02-11 11:24:37 +01:00
parent 5c05a339c6
commit f6c8c89ff7
5 changed files with 49 additions and 18 deletions
+8 -8
View File
@@ -989,15 +989,15 @@ will fail.
Subject: Non-system user or group used for device ownership
Defined-By: systemd
Support: %SUPPORT_URL%
Documentation: man:systemd(1) systemd-udevd(8)
Documentation: man:systemd(1) systemd-udevd(8) systemd-networkd(8)
The ownership of a device managed by systemd-udevd is assigned to a "regular"
(non-system) user or group. This is currently allowed for compatibility, but is
deprecated and discouraged. Ownership of a device node grants the privileges to
change ACLs, the group, access mode, or set labels or extended attributes,
which creates a conflict of management, because both udev and the user are in
power to change these attributes. In addition, device nodes appear early in
boot, while regular users may appear only later.
The ownership of a device managed by systemd-udevd or systemd-networkd is
assigned to a "regular" (non-system) user or group. This is currently allowed
for compatibility, but is deprecated and discouraged. Ownership of a device
node grants the privileges to change ACLs, the group, access mode, or set
labels or extended attributes, which creates a conflict of management, because
both udev and the user are in power to change these attributes. In addition,
device nodes appear early in boot, while regular users may appear only later.
For devices managed by systemd-udevd, it is instead recommended to use the
"uaccess"/"xaccess" mechanisms to grant limited and temporary access to device