24 lines
1.2 KiB
Plaintext
24 lines
1.2 KiB
Plaintext
# UNINSTALLED drop-in for user@<ORIGINAL_RUNTIME_UID>.service, NOT the manager.
|
|
# Guarded migration must retire the old user manager before installing this view.
|
|
# Sanitized home contains ONLY reviewed runtime config/unit/data references.
|
|
# Never bind/copy the operator home, .ssh, keyrings or private manager metadata.
|
|
[Unit]
|
|
Requires=user-runtime-dir@@ORIGINAL_RUNTIME_UID@.service
|
|
After=user-runtime-dir@@ORIGINAL_RUNTIME_UID@.service
|
|
|
|
[Service]
|
|
Environment=HOME=@ORIGINAL_HOME@
|
|
Environment=XDG_RUNTIME_DIR=/run/user/@ORIGINAL_RUNTIME_UID@
|
|
ProtectHome=tmpfs
|
|
BindPaths=@SANITIZED_RUNTIME_HOME@:@ORIGINAL_HOME@
|
|
# ProtectHome also covers /run/user. Retain ONLY this principal's original
|
|
# runtime directory (including its bus), with the runtime-dir unit's lifetime.
|
|
BindPaths=/run/user/@ORIGINAL_RUNTIME_UID@
|
|
InaccessiblePaths=@MANAGER_BACKING_PARENT@ @SNAPSHOT_BACKING_PARENT@ @AUTHORITY_BACKING_PARENT@
|
|
PrivateTmp=yes
|
|
NoNewPrivileges=no
|
|
Delegate=yes
|
|
# Original UID/GID, /etc/subuid and /etc/subgid allocations, absolute graphroot,
|
|
# volume paths and runtime_data_dir stay unchanged. NO recursive chown.
|
|
# Requires separate no-sudo/polkit/SSH/IPC enforcement; this is NOT that policy.
|