FS#39807 - [lighttpd] add PrivateDevices=yes

Attached to Project: Arch Linux
Opened by Daniel Micay (thestinger) - Thursday, 10 April 2014, 19:37 GMT
Last edited by Dave Reisner (falconindy) - Thursday, 24 April 2014, 14:07 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Pierre Schmitz (Pierre)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

This will improve the level of isolation for the processes running as http:http.

https://wiki.archlinux.org/index.php/DeveloperWiki:Service_isolation#Status
This task depends upon

Closed by  Dave Reisner (falconindy)
Thursday, 24 April 2014, 14:07 GMT
Reason for closing:  Won't implement
Additional comments about closing:  This breaks using syslog. It's not actually ready to be used yet.
Comment by Daniel Micay (thestinger) - Friday, 11 April 2014, 16:30 GMT
I actually already did this for nginx, so there's no need to do anything there.
Comment by Daniel Micay (thestinger) - Friday, 11 April 2014, 20:21 GMT
It might be best for this to wait until these support journald directly. Using PrivateDevices=yes will break configurations using syslog.
Comment by Doug Newgard (Scimmia) - Tuesday, 15 April 2014, 15:43 GMT
Seems it also breaks running in a container,  FS#39873 
Comment by Daniel Micay (thestinger) - Tuesday, 15 April 2014, 18:50 GMT
It doesn't break running in a container for me. I think that's just user error or an OpenSUSE bug. If we want to switch to using the journal for logging, then it does make sense to remove it until the journal API (socket in /run) can be used instead of the syslog one (device in /dev).

Loading...