Bug#792187: systemd: systemctl start not working when ReadWriteDirectories is a symlink

nfb notfreebeer at openmailbox.org
Sun Jul 12 22:41:39 BST 2015


> Including the complete .service file would be helpful.

Oh yes i didn't specify i installed the tor package in the debian testing
repos, so the unit file is the one included in the package:

---

[Unit]
Description=Anonymizing overlay network for TCP
After=network.target nss-lookup.target

[Service]
Type=notify
NotifyAccess=all
PIDFile=/var/run/tor/tor.pid
PermissionsStartOnly=yes
ExecStartPre=/usr/bin/install -Z -m 02750 -o debian-tor -g debian-tor -d
/var/run/tor
ExecStartPre=/usr/bin/tor --defaults-torrc
/usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0
--verify-config
ExecStart=/usr/bin/tor --defaults-torrc
/usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0
ExecReload=/bin/kill -HUP ${MAINPID}
KillSignal=SIGINT
TimeoutSec=45
Restart=on-failure
LimitNOFILE=65536

# Hardening
PrivateTmp=yes
PrivateDevices=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/lib/tor
ReadWriteDirectories=-/var/log/tor
ReadWriteDirectories=-/var/run
CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
CAP_DAC_OVERRIDE CAP_CHOWN CAP_FOWNER

[Install]
WantedBy=multi-user.target

---


> That said, this sounds like an upstream issue, so please report that at
> 
> https://github.com/systemd/systemd/issues/
> 
> and report bug with the bug number.

Sorry, do i have to file an upstream bug referring to this bug number in its
body, or do i have to write back the upstream bug number here?

Thanks.




More information about the Pkg-systemd-maintainers mailing list