Bug 693891
| Summary: | Systemd needs to mount file systems -rshared. | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jóhann B. Guðmundsson <johannbg> | ||||
| Component: | systemd | Assignee: | systemd-maint | ||||
| Status: | CLOSED NEXTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | rawhide | CC: | dwalsh, harald, johannbg, kay, lpoetter, metherid, mgrepl, mschmidt, notting, plautrba, sgrubb, tcallawa, tmraz | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2012-08-08 22:59:01 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 713562 | ||||||
| Attachments: |
|
||||||
|
Description
Jóhann B. Guðmundsson
2011-04-05 20:25:22 UTC
This is only needed by pam_namespace and is not really correct. pam_namespace should be doing the ExecStart=/bin/mount --rbind /tmp /tmp ExecStart=/bin/mount --rbind /var/tmp /var/tmp ExecStart=/bin/mount --make-private /tmp ExecStart=/bin/mount --make-private /var/tmp ExecStart=/bin/mount --rbind /home /home ExecStart=/bin/mount --make-private /home On any directory handed to it. And the only thing the init script needs to do is. ExecStart=/bin/mount --make-rshared / seunshare already does this and I sent a patch to pam_namespace a while back to implement something similar. Moving systemd service RFEs to rawhide. At this point, it is not appropriate in the Fedora 15 cycle to add these. Furthermore, at this point, we are still finalizing the packaging guidelines to handle SysV -> systemd upgrades. We therefore request: - wait until there are packaging guidelines (this will be announced on the devel list). This ensures that upgrades will work smoothly and we/you won't have to do multiple sets of changes. - work on these sorts of changes for Fedora 16 where necessary, not Fedora 15, as we're trying to fix things for release. - do *not* change a service from SysV to systemd in an existing release (such as Fedora 15), as this is the sort of behavior change that goes against our update policy, documented as https://fedoraproject.org/wiki/Updates_Policy Yes, pam_namespace now does the make-private mounts on its own. So only what Dan Walsh writes is needed. And I do not think it should be in the pam package as it is needed only when pam_namespace is configured to do anything at all which it is not by default. I suppose xguest package would be more appropriate as it uses pam_namespace. I talked to Lennart and Kay about making systemd mount / by default as rshared. Then I can eliminate the sandbox init script altogether. This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. For F18 we changed the default mount propagation mode to "shared". |