Skip to content

Use PrivateTmp=true on systemd services#4

Merged
bastelfreak merged 1 commit intoOpenVoxProject:mainfrom
ekohl:use-systemd-privatetmp
May 6, 2025
Merged

Use PrivateTmp=true on systemd services#4
bastelfreak merged 1 commit intoOpenVoxProject:mainfrom
ekohl:use-systemd-privatetmp

Conversation

@ekohl
Copy link
Copy Markdown
Contributor

@ekohl ekohl commented Feb 20, 2025

Using a private tmp directory improves security.

@nmburgan
Copy link
Copy Markdown
Member

Rebase should fix tests

Using a private tmp directory improves security.
@ekohl ekohl force-pushed the use-systemd-privatetmp branch from 8a3854b to 610bba4 Compare February 20, 2025 20:56
@ekohl
Copy link
Copy Markdown
Contributor Author

ekohl commented Feb 20, 2025

Rebased

Copy link
Copy Markdown
Contributor

@bastelfreak bastelfreak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've been running puppetserver with PrivateTmp=true for months without issues.

@bastelfreak bastelfreak merged commit cefa143 into OpenVoxProject:main May 6, 2025
@bastelfreak bastelfreak added the bug Something isn't working label May 6, 2025
@ekohl ekohl deleted the use-systemd-privatetmp branch May 6, 2025 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants