From 1fb8269ea6bbefafb627f4f070cba41d3f01a0d8 Mon Sep 17 00:00:00 2001 From: Michal Schmidt Date: Thu, 29 Aug 2013 18:12:02 +0200 Subject: [PATCH 2/4] daemon/main: do not create /run/icecc by ourselves In order to be able to restrict the daemon's SELinux policy even more, let's rely on tmpfiles.d to create the /run/icecc directory for us instead of creating it from the daemon. --- daemon/main.cpp | 4 ---- 1 file changed, 4 deletions(-) diff --git a/daemon/main.cpp b/daemon/main.cpp index 00dfab7fe2..e86534118b 100644 --- a/daemon/main.cpp +++ b/daemon/main.cpp @@ -2231,10 +2231,6 @@ int main(int argc, char **argv) logfile = "/var/log/icecc/iceccd.log"; } - mkdir("/var/run/icecc", S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH); - chmod("/var/run/icecc", S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH); - ignore_result(chown("/var/run/icecc", d.user_uid, d.user_gid)); - #ifdef HAVE_LIBCAP_NG capng_clear(CAPNG_SELECT_BOTH); capng_update(CAPNG_ADD, (capng_type_t)(CAPNG_EFFECTIVE | CAPNG_PERMITTED), CAP_SYS_CHROOT); -- 2.13.0