summary refs log tree commit diff
path: root/NEWS
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2023-05-11 10:23:30 +0200
committerLudovic Courtès <ludo@gnu.org>2023-05-11 13:21:45 +0200
commit695042ff108f57fa190852f3fe1f06b2b1f6c967 (patch)
tree637cf0e8d50525060b724db6f96075c8bc073361 /NEWS
parent3a00aba9e9bc65cd7578324635336222a302d200 (diff)
downloadguix-695042ff108f57fa190852f3fe1f06b2b1f6c967.tar.gz
services: syslog: Do not call 'umask' in PID 1.
Fixes a race condition when starting services in parallel with shepherd
0.10.x whereby a service might create files and directories with umask #o137.

An example is the bitlbee service with its least-authority wrapper: the
wrapper would create a tree with directories set to #o640, thereby
making the whole directory tree inaccessible.

* gnu/services/base.scm (syslog-shepherd-service): Pass #:file-creation-mask
to 'make-forkexec-constructor' instead of calling 'umask' in PID 1.
Diffstat (limited to 'NEWS')
0 files changed, 0 insertions, 0 deletions