Lennart Poettering
53fc4c48e7
This also relaxes the inode access modes a bit, in case they were set to 0600: we now set the "r" bit too, i.e. use 0644. This is beneficial since it permits unpriv code to read the xattrs of the entrypoints (which require read access). Note that in order to be able to connect() to a socket inode you need write access, hence this shouldn't compromise security in any way.
27 lines
791 B
SYSTEMD
27 lines
791 B
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=udev Varlink Socket
|
|
Documentation=man:systemd-udevd-varlink.socket(8) man:udev(7)
|
|
DefaultDependencies=no
|
|
Before=sockets.target
|
|
ConditionPathIsReadWrite=/sys
|
|
|
|
[Socket]
|
|
Service=systemd-udevd.service
|
|
ListenStream=/run/udev/io.systemd.Udev
|
|
Symlinks=/run/varlink/registry/io.systemd.Udev
|
|
FileDescriptorName=varlink
|
|
SocketMode=0644
|
|
RemoveOnStop=yes
|
|
DeferTrigger=yes
|
|
XAttrEntryPoint=user.varlink=entrypoint
|
|
XAttrListen=user.varlink=listen
|