guix-devel/gnu/build
Ludovic Courtès d429878daf
activation: Shared system home directories are now 555 and root-owned.
Fixes <https://bugs.gnu.org/34788>.
Reported by Jack Hill <jackhill@jackhill.us>.

Regression introduced by the combination of
8bb76f3d44 and
0ae735bcc8ff7fdc89d67b492bdee9091ee19e86: /var/empty would be 700 and
owned by one of the system accounts (thus inaccessible to others), and
/var/run/dbus would be 700 as well, thereby preventing D-Bus clients
from connecting to the daemon.

* gnu/build/activation.scm (duplicates): New procedure.
(activate-users+groups)[system-accounts]: New variable.
Use it.  Make shared system account home directories #o555 and
root-owned.
* gnu/services/dbus.scm (dbus-activation): Make /var/run/dbus #o755.
* gnu/tests/base.scm (run-basic-test): Test the ownership and
permissions of /var/empty.
2019-03-08 23:21:59 +01:00
..
accounts.scm Add (gnu build accounts). 2019-03-07 20:05:09 +01:00
activation.scm activation: Shared system home directories are now 555 and root-owned. 2019-03-08 23:21:59 +01:00
bootloader.scm
cross-toolchain.scm gnu: cross-base: Use invoke in (gnu build cross-toolchain). 2018-03-23 04:41:53 -04:00
file-systems.scm file-systems: Add read-luks-partition-uuid. 2019-01-17 14:04:26 +01:00
install.scm activation: Build account databases with (gnu build accounts). 2019-03-07 20:05:09 +01:00
linux-boot.scm file-systems: Remove 'title' field and add <file-system-label>. 2018-05-28 13:24:11 +02:00
linux-container.scm linux-container: Work around EBADF errors upon exit. 2018-01-15 23:29:33 +01:00
linux-initrd.scm linux-initrd: 'expression->initrd' returns the complete file name. 2018-11-21 23:26:59 +01:00
linux-modules.scm linux-modules: module-soft-dependencies: Partition the result and return it as two lists. 2019-03-05 13:43:34 +01:00
marionette.scm marionette: Add wait-for-unix-socket. 2018-08-28 00:19:58 -07:00
shepherd.scm system: Remove uses of the 'title' field of <file-system>. 2018-05-28 13:24:19 +02:00
svg.scm bootloader: grub: Use 'with-extensions'. 2018-06-01 15:21:28 +02:00
vm.scm vm: Re-enable KVM on i386. 2018-12-19 00:14:00 +01:00