Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tmpfs is an unacceptable location to store long-lived files #4

Open
m0dular opened this issue Apr 21, 2021 · 0 comments
Open

tmpfs is an unacceptable location to store long-lived files #4

m0dular opened this issue Apr 21, 2021 · 0 comments

Comments

@m0dular
Copy link

m0dular commented Apr 21, 2021

On *nix, /tmp is (usually) an in-memory file system intended for temporary files and files that do not need to survive a reboot. It should be used by scripts that need temp files (via mktemp for example), but not for the scripts themselves. There is also a security issue of users editing the scripts to contain arbitrary code that would then be run as root by systemd. I think the "sticky bit" is standard now, but this should still be avoided.

Depending on the use case, this should either use templates to set up the .service file to run the scripts from a different location, or use a Forge module that has types and providers for systemd resources.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant