[Pkg-systemd-maintainers] Bug#738862: Migrating TMPTIME setting accidentally enables cleaning of /var/tmp

[Michael Biebl]

Package: systemd
Version: 204-7
Severity: important

systemd.postinst contains code to migrate the TMPTIME setting and
creates /etc/tmpfiles.d/tmp.conf with the following content if TMPTIME
is set to -*|infinite|infinity

 # Automatically migrated from TMPTIME in /etc/default/rcS
 # Clear /var/tmp as in /usr/lib/tmpfiles.d/tmp.conf, but avoid clearing
 # /tmp
 d /var/tmp 1777 root root 30d


We explicitly disabled cleaning of /var/tmp in
/usr/lib/tmpfiles.d/tmp.conf though to match the existing sysvinit
behaviour in Debian:

 # Clear tmp directories separately, to make them easier to override
 D /tmp 1777 root root -
 #d /var/tmp 1777 root root 30d

 # Exclude namespace mountpoints created with PrivateTmp=yes
 x /tmp/systemd-private-*
 x /var/tmp/systemd-private-*
 X /tmp/systemd-private-*/tmp
 X /var/tmp/systemd-private-*/tmp


When migrating the TMPTIME setting we should take that into account.
I guess we added the TMPTIME migration code before we decided to comment
out the /var/tmp entry in /usr/lib/tmpfiles.d/tmp.conf.

To make overriding easier, we could furthe split up tmp.conf, or use
something like echo "X  /tmp" > /etc/tmpfiles.d/99-tmp.conf
to disable cleaning of /tmp. (This needs testing if this works as
intended though)

We should also consider fixing up a potentially broken
/etc/tmpfiles.d/tmp.conf on upgrades.


-- Package-specific info:

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-58-generic (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages systemd depends on:
ii  acl                  2.2.52-1
ii  adduser              3.113+nmu3
ii  initscripts          2.88dsf-49
ii  libacl1              2.2.52-1
ii  libaudit1            1:2.3.3-4
ii  libc6                2.17-97
ii  libcap2              1:2.22-1.2
ii  libcryptsetup4       2:1.6.1-1
ii  libdbus-1-3          1.8.0-1
ii  libgcrypt11          1.5.3-3
ii  libkmod2             16-2
ii  liblzma5             5.1.1alpha+20120614-2
ii  libpam0g             1.1.8-1
ii  libselinux1          2.2.2-1
ii  libsystemd-daemon0   204-7
ii  libsystemd-journal0  204-7
ii  libsystemd-login0    204-7
ii  libudev1             204-7
ii  libwrap0             7.6.q-25
ii  udev                 204-7
ii  util-linux           2.20.1-5.6

Versions of packages systemd recommends:
ii  libpam-systemd  204-7

Versions of packages systemd suggests:
ii  systemd-ui  2-2

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: systemd-delta.txt
Type: text/x-diff
Size: 23333 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20140213/d5d36b85/attachment-0002.diff>
-------------- next part --------------
==> /var/lib/systemd/deb-systemd-helper-enabled/avahi-daemon.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/avahi-daemon.service
/etc/systemd/system/sockets.target.wants/avahi-daemon.socket
/etc/systemd/system/dbus-org.freedesktop.Avahi.service

==> /var/lib/systemd/deb-systemd-helper-enabled/graphical.target.wants/accounts-daemon.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/basic.target.wants/firewalld.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/atd.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/avahi-daemon.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/ssh.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/binfmt-support.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/pppd-dns.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/rsyslog.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/anacron.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/firewalld.service.dsh-also <==
/etc/systemd/system/basic.target.wants/firewalld.service
/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service

==> /var/lib/systemd/deb-systemd-helper-enabled/binfmt-support.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/binfmt-support.service

==> /var/lib/systemd/deb-systemd-helper-enabled/dbus-org.freedesktop.Avahi.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/ssh.socket.dsh-also <==
/etc/systemd/system/sockets.target.wants/ssh.socket

==> /var/lib/systemd/deb-systemd-helper-enabled/ssh.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/ssh.service

==> /var/lib/systemd/deb-systemd-helper-enabled/anacron.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/anacron.service

==> /var/lib/systemd/deb-systemd-helper-enabled/syslog.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/dbus-org.fedoraproject.FirewallD1.service <==

==> /var/lib/systemd/deb-systemd-helper-enabled/accounts-daemon.service.dsh-also <==
/etc/systemd/system/graphical.target.wants/accounts-daemon.service

==> /var/lib/systemd/deb-systemd-helper-enabled/sockets.target.wants/avahi-daemon.socket <==

==> /var/lib/systemd/deb-systemd-helper-enabled/pppd-dns.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/pppd-dns.service

==> /var/lib/systemd/deb-systemd-helper-enabled/avahi-daemon.socket.dsh-also <==
/etc/systemd/system/sockets.target.wants/avahi-daemon.socket

==> /var/lib/systemd/deb-systemd-helper-enabled/rsyslog.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/rsyslog.service
/etc/systemd/system/syslog.service

==> /var/lib/systemd/deb-systemd-helper-enabled/atd.service.dsh-also <==
/etc/systemd/system/multi-user.target.wants/atd.service
-------------- next part --------------
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
proc            /proc           proc    defaults        0       0
# / was on /dev/sda7 during installation
UUID=5c503ec2-6528-44bb-9ff5-aa2687aa9706 /               ext4    errors=remount-ro 0       1
# /home was on /dev/sda6 during installation
UUID=7652cf98-e671-47ea-80d6-02be15580bb5 /home           ext4    defaults        0       2
# swap was on /dev/sda5 during installation
UUID=c0d2bc19-898f-4306-a734-85e547e249f0 none            swap    sw              0       0

LABEL=Data	/mnt/data	ntfs-3g	user,auto,comment=systemd.automount	0	0

LABEL=Fedora	/mnt/fedora	ext4	noauto		0	0
LABEL=Ubuntu	/mnt/ubuntu	ext4	noauto		0	0
#192.168.178.86:/srv/nfs /mnt/backup nfs _netdev 0 0
LABEL=Asteria	/mnt/ssd	ntfs-3g	noauto,user	0	0