This service will be undergoing maintenance at 00:00 UTC, 2017-10-23 It is expected to last about 30 minutes
Bug 693891 - Systemd needs to mount file systems -rshared.
Systemd needs to mount file systems -rshared.
Product: Fedora
Classification: Fedora
Component: systemd (Show other bugs)
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: systemd-maint
Fedora Extras Quality Assurance
Depends On:
Blocks: SysVtoSystemd
  Show dependency treegraph
Reported: 2011-04-05 16:25 EDT by Jóhann B. Guðmundsson
Modified: 2012-08-08 19:24 EDT (History)
13 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2012-08-08 18:59:01 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Native systemd service file (530 bytes, text/plain)
2011-04-05 16:25 EDT, Jóhann B. Guðmundsson
no flags Details

  None (edit)
Description Jóhann B. Guðmundsson 2011-04-05 16:25:22 EDT
Created attachment 490074 [details]
Native systemd service file

Description of problem:

The attached file is a native systemd file for upcoming F15 Feature [1]

Please read [2] on how to packaging and installing systemd Service files.

To learn more about Systemd daemon see [3].

If you have any question dont hesitate to ask them on this bug report.




Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
Actual results:

Expected results:

Additional info:
Comment 1 Daniel Walsh 2011-04-05 17:08:56 EDT
This is only needed by pam_namespace and is not really correct.

pam_namespace should be doing the 

ExecStart=/bin/mount --rbind /tmp /tmp
ExecStart=/bin/mount --rbind /var/tmp /var/tmp 
ExecStart=/bin/mount --make-private /tmp 
ExecStart=/bin/mount --make-private /var/tmp 
ExecStart=/bin/mount --rbind /home /home
ExecStart=/bin/mount --make-private /home

On any directory handed to it.  And the only thing the init script needs to do is.

ExecStart=/bin/mount --make-rshared / 

seunshare already does this and I sent a patch to pam_namespace a while back to implement something similar.
Comment 2 Bill Nottingham 2011-04-26 13:35:41 EDT
Moving systemd service RFEs to rawhide.

At this point, it is not appropriate in the Fedora 15 cycle to add these. Furthermore, at this point, we are still finalizing the packaging guidelines to handle SysV -> systemd upgrades.

We therefore request:
- wait until there are packaging guidelines (this will be announced on the devel list). This ensures that upgrades will work smoothly and we/you won't have to do multiple sets of changes.
- work on these sorts of changes for Fedora 16 where necessary, not Fedora 15, as we're trying to fix things for release.
- do *not* change a service from SysV to systemd in an existing release (such as Fedora 15), as this is the sort of behavior change that goes against our update policy, documented as
Comment 3 Tomas Mraz 2011-09-19 16:56:31 EDT
Yes, pam_namespace now does the make-private mounts on its own.
So only what Dan Walsh writes is needed. And I do not think it should be in the pam package as it is needed only when pam_namespace is configured to do anything at all which it is not by default.

I suppose xguest package would be more appropriate as it uses pam_namespace.
Comment 4 Daniel Walsh 2011-09-20 13:48:51 EDT
I talked to Lennart and Kay about making systemd mount / by default as rshared.  Then I can eliminate the sandbox init script altogether.
Comment 5 Fedora Admin XMLRPC Client 2011-10-20 12:25:08 EDT
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 6 Lennart Poettering 2012-08-08 18:59:01 EDT
For F18 we changed the default mount propagation mode to "shared".

Note You need to log in before you can comment on or make changes to this bug.