On 21/10/14 20:25, Lennart Poettering wrote:
> Ah, well, at least they should make the lib64 thing arch dependent.
Multiarch means that whichever architecture systemd happens to have been
compiled for, /lib64 might exist. If it does, it's a system library
directory.
(Consider an i386 or armhf sys
On Tue, 21.10.14 21:22, Christian Seiler (christ...@iwakd.de) wrote:
> Am 21.10.2014 20:09, schrieb Lennart Poettering:
> >> Debian's systemd package currently includes a variant of Martin's
> >> patch that does include additional directories. So your point that
> >> ProtectSystem= does the same
Am 21.10.2014 20:09, schrieb Lennart Poettering:
>> Debian's systemd package currently includes a variant of Martin's
>> patch that does include additional directories. So your point that
>> ProtectSystem= does the same thing on every distro is already not
>> true.
>
> Which ones precisely?
Her
On 21/10/14 19:18, Lennart Poettering wrote:
> Well, on some distros lib64 is a symlink on others it isn't. Doesn't
> Debian have /lib/ or so with /lib64 just a symlink to the right
> subdir?
My Debian laptop has /lib64 as a real directory, containing a
ld-linux-x86-64.so.2 symlink into /lib/.
I
Lennart Poettering [2014-10-21 20:18 +0200]:
> Well, on some distros lib64 is a symlink on others it isn't. Doesn't
> Debian have /lib/ or so with /lib64 just a symlink to the right
> subdir?
More or less:
/lib64/ld-linux-x86-64.so.2 -> /lib/x86_64-linux-gnu/ld-2.19.so
Martin
--
Martin Pitt
On Tue, 21.10.14 13:38, Simon McVittie (simon.mcvit...@collabora.co.uk) wrote:
> On 21/10/14 13:03, Christian Seiler wrote:
> > That is definitely a good point. Also note that /lib32 is not included
> > in the patch...
>
> lib64 is part of the Linux/x86_64 platform ABI (the exact path
> /lib64/ld
On Tue, 21.10.14 15:57, Christian Seiler (christ...@iwakd.de) wrote:
> Am 2014-10-21 14:28, schrieb Lennart Poettering:
> >We explicitly make no
> >assumptions on /opt because nobody knows right now what it is supposed
> >to be...
>
> Sure, I wasn't disputing that point.
>
> >Same for /usr, /bin
Am 2014-10-21 14:28, schrieb Lennart Poettering:
We explicitly make no
assumptions on /opt because nobody knows right now what it is
supposed
to be...
Sure, I wasn't disputing that point.
Same for /usr, /bin, /sbin, and the other stuff Martin#s
patch added: we cannot make assumptions about
Am 21.10.2014 um 14:38 schrieb Simon McVittie:
On 21/10/14 13:03, Christian Seiler wrote:
That is definitely a good point. Also note that /lib32 is not included
in the patch...
lib64 is part of the Linux/x86_64 platform ABI (the exact path
/lib64/ld-linux-x86-64.so.2 is hard-coded into every
On 21/10/14 13:03, Christian Seiler wrote:
> That is definitely a good point. Also note that /lib32 is not included
> in the patch...
lib64 is part of the Linux/x86_64 platform ABI (the exact path
/lib64/ld-linux-x86-64.so.2 is hard-coded into every Linux/x86_64
executable) so it cannot be conside
On Tue, 21.10.14 14:03, Christian Seiler (christ...@iwakd.de) wrote:
> Am 2014-10-20 17:05, schrieb Lennart Poettering:
> >I am sorry, but this is nothing we want to support. Monopolizing the
> >OS in /usr is what makes ProtectSystem= work. If you split things up
> >into many dirs then you will si
Am 2014-10-20 17:05, schrieb Lennart Poettering:
I am sorry, but this is nothing we want to support. Monopolizing the
OS in /usr is what makes ProtectSystem= work. If you split things up
into many dirs then you will simply not get the same level of
protection. We will not try to list every possib
On Sun, 19.10.14 12:05, Martin Pitt (martin.p...@ubuntu.com) wrote:
> Hello all,
>
> in Debian/Ubuntu we don't use the merged /usr tree for now. systemd
> generally supports that (HAVE_SPLIT_USR), but doesn't consider that
> for ProtectSystem=.
>
> Ansgar (CC'ed) wrote a Debian specific patch fo
Hello all,
in Debian/Ubuntu we don't use the merged /usr tree for now. systemd
generally supports that (HAVE_SPLIT_USR), but doesn't consider that
for ProtectSystem=.
Ansgar (CC'ed) wrote a Debian specific patch for that some months ago.
I generalized it for upstream now.
Thanks for considering,
14 matches
Mail list logo
