mirror of
https://github.com/systemd/systemd.git
synced 2026-08-09 17:38:42 +00:00
53fc4c48e7
This also relaxes the inode access modes a bit, in case they were set to 0600: we now set the "r" bit too, i.e. use 0644. This is beneficial since it permits unpriv code to read the xattrs of the entrypoints (which require read access). Note that in order to be able to connect() to a socket inode you need write access, hence this shouldn't compromise security in any way.
32 lines
978 B
SYSTEMD
32 lines
978 B
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Cloud Instance Metadata Access (IMDS)
|
|
Documentation=man:systemd-imdsd@.service(8)
|
|
DefaultDependencies=no
|
|
Before=sockets.target
|
|
|
|
[Socket]
|
|
ListenStream=/run/systemd/io.systemd.InstanceMetadata
|
|
Symlinks=/run/varlink/registry/io.systemd.InstanceMetadata
|
|
FileDescriptorName=varlink
|
|
SocketMode=0666
|
|
Accept=yes
|
|
MaxConnectionsPerSource=16
|
|
RemoveOnStop=yes
|
|
XAttrEntryPoint=user.varlink=entrypoint
|
|
XAttrListen=user.varlink=listen
|
|
XAttrAccept=user.varlink=server
|
|
|
|
# Note that this is typically pulled in automatically by
|
|
# systemd-imds-generator, but you can also enable it manually if you like.
|
|
[Install]
|
|
WantedBy=sockets.target
|