Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add systemd unit to setup application scope and add hardening. #27325

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

shanechko
Copy link

After enabling support for D-Bus activation 2dfe858 application may started by the dbus service.
In this case application is placed into the incorrect cgroup scope inherited from dbus service.

This change provides systemd user unit for application to put application to the applications scope. Also, add some hardening to prevent unnecessary permissions.

@CLAassistant
Copy link

CLAassistant commented Jan 7, 2024

CLA assistant check
All committers have signed the CLA.

@ilya-fedin
Copy link
Contributor

In this case application is placed into the incorrect cgroup scope inherited from dbus service.

That's perhaps not worse than being placed in the cgroup from the application the launches tdesktop given that mime-apps-spec implementations usually don't create a cgroup. I'd rather encourage people to switch to dbus-broker if that's something important to them, instead of maintaining a unit file as a part of tdesktop.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants