Files
systemd/units/systemd-cryptenroll.socket
Julian Sparber 069198a4f4 cryptenroll-varlink: allow access from all users
Since the varlink interface for cryptenroll uses polkit it makes sense
to allow connections from all users not just root and user running the
server.
2026-10-13 11:33:06 +02:00

26 lines
785 B
SYSTEMD

# SPDX-License-Identifier: LGPL-2.1-or-later
#
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
[Unit]
Description=Disk Encryption Enrollment Service Socket
Documentation=man:systemd-cryptenroll(1)
DefaultDependencies=no
Before=sockets.target
[Socket]
ListenStream=/run/systemd/io.systemd.CryptEnroll
Symlinks=/run/varlink/registry/io.systemd.CryptEnroll
FileDescriptorName=varlink
SocketMode=0666
Accept=yes
MaxConnectionsPerSource=16
XAttrEntryPoint=user.varlink=entrypoint
XAttrListen=user.varlink=listen
XAttrAccept=user.varlink=server