You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
On *nix, /tmp is (usually) an in-memory file system intended for temporary files and files that do not need to survive a reboot. It should be used by scripts that need temp files (via mktemp for example), but not for the scripts themselves. There is also a security issue of users editing the scripts to contain arbitrary code that would then be run as root by systemd. I think the "sticky bit" is standard now, but this should still be avoided.
Depending on the use case, this should either use templates to set up the .service file to run the scripts from a different location, or use a Forge module that has types and providers for systemd resources.
The text was updated successfully, but these errors were encountered:
On *nix,
/tmp
is (usually) an in-memory file system intended for temporary files and files that do not need to survive a reboot. It should be used by scripts that need temp files (viamktemp
for example), but not for the scripts themselves. There is also a security issue of users editing the scripts to contain arbitrary code that would then be run asroot
bysystemd
. I think the "sticky bit" is standard now, but this should still be avoided.Depending on the use case, this should either use templates to set up the
.service
file to run the scripts from a different location, or use a Forge module that has types and providers forsystemd
resources.The text was updated successfully, but these errors were encountered: