blob: b683434de8af3fff1d748dec4319ffecd2aa333e [file] [log] [blame]
# Copyright 2021 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
# A tmpfile.d config for core system paths that are daemon independent and
# do not fit well in daemon-specific configs.
# Type Path Mode User Group Age Arguments
# Startup.
D!= /var/lock 0755 root root
D!= /var/run 0755 root root
d= /mnt/stateful_partition/home
d= /mnt/stateful_partition/home/chronos 0755 root root
d= /mnt/stateful_partition/home/root 1751 root root
d= /mnt/stateful_partition/home/user 0755 root root
d= /mnt/stateful_partition/unencrypted 0755 root root
d= /mnt/stateful_partition/unencrypted/cache 0755 root root
d= /mnt/stateful_partition/unencrypted/preserve 0775 root preserve
# Create a directory for mount-encrypted related logs and metrics.
d= /run/mount_encrypted 0755 root root
# Create a directory where we can keep persistent references to namespaces.
d= /run/namespaces 0755 root root
# Create a file where we can bind-mount the Chrome mount namespace.
f+= /run/namespaces/mnt_chrome 0755 root root
d= /var/cache 0755 root root
d= /var/db 0755 root root
# rsyslog needs to be able to create new logfiles, but not delete other logs.
d= /var/log 1775 root syslog
d= /var/log/metrics 0755 chronos chronos
d= /var/spool 0755 root root
d= /var/lib 0755 root root
d= /var/lib/misc 0755 root root
# /var/tmp must be world-writable and sticky.
d= /var/tmp 1777 root root