summaryrefslogtreecommitdiffstats
path: root/src/run/systemd-run0.in
diff options
context:
space:
mode:
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2024-03-19 11:14:55 +0100
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2024-03-19 16:37:22 +0100
commit7aed43437175623e0f3ae8b071bbc500c13ce893 (patch)
treef093eaf63be3e7463414bdefb5ab79ec328c974d /src/run/systemd-run0.in
parentunits: add one more equivalency of '-' in '_' on kernel cmdline (diff)
downloadsystemd-7aed43437175623e0f3ae8b071bbc500c13ce893.tar.xz
systemd-7aed43437175623e0f3ae8b071bbc500c13ce893.zip
Rename uid0 to run0
Naming is always a matter of preference, and the old name would certainly work, but I think the new one has the following advantages: - A verb is better than a noun. - The name more similar to "the competition", i.e. 'sudo', 'pkexec', 'runas', 'doas', which generally include an action verb. - The connection between 'systemd-run' and 'run0' is more obvious. There has been no release yet with the old name, so we can rename without caring for backwards compatibility.
Diffstat (limited to 'src/run/systemd-run0.in')
-rw-r--r--src/run/systemd-run0.in23
1 files changed, 23 insertions, 0 deletions
diff --git a/src/run/systemd-run0.in b/src/run/systemd-run0.in
new file mode 100644
index 0000000000..11f830b7b0
--- /dev/null
+++ b/src/run/systemd-run0.in
@@ -0,0 +1,23 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+# This file is part of systemd.
+#
+# Used by run0 sessions
+
+{% if ENABLE_HOMED %}
+-account sufficient pam_systemd_home.so
+{% endif %}
+account required pam_unix.so
+
+{% if HAVE_SELINUX %}
+session required pam_selinux.so close
+session required pam_selinux.so open
+{% endif %}
+session required pam_loginuid.so
+session optional pam_keyinit.so force revoke
+session required pam_namespace.so
+{% if ENABLE_HOMED %}
+-session optional pam_systemd_home.so
+{% endif %}
+session optional pam_umask.so silent
+session optional pam_systemd.so
+session required pam_unix.so