# Copyright 2021 The ChromiumOS Authors
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# A tmpfile.d config for core system paths that are daemon independent and
# do not fit well in daemon-specific configs.

# Type  Path  Mode  User  Group  Age  Arguments

# Startup.
D!= /var/lock 0755 root root
D!= /var/run 0755 root root

d= /mnt/stateful_partition/home
d= /mnt/stateful_partition/home/chronos 0755 root root
d= /mnt/stateful_partition/home/root 1751 root root
d= /mnt/stateful_partition/home/user 0755 root root
d= /mnt/stateful_partition/unencrypted 0755 root root
d= /mnt/stateful_partition/unencrypted/cache 0755 root root
d= /mnt/stateful_partition/unencrypted/preserve 0775 root preserve

# Create a directory for mount-encrypted related logs and metrics.
d= /run/mount_encrypted 0755 root root

# Create a directory for hibernate related logs and metrics.
d= /run/hibernate 0755 root root

# Create a directory where we can keep persistent references to namespaces.
d= /run/namespaces 0755 root root

# Create a file where we can bind-mount the Chrome mount namespace.
f+= /run/namespaces/mnt_chrome 0755 root root

d= /var/cache 0755 root root
d= /var/db 0755 root root
# rsyslog needs to be able to create new logfiles, but not delete other logs.
d= /var/log 1775 root syslog
d= /var/log/metrics 0755 chronos chronos
d= /var/spool 0755 root root
d= /var/lib 0755 root root
d= /var/lib/misc 0755 root root
d= /var/lib/boot-update-firmware 0755 root root
# /var/tmp must be world-writable and sticky.
d= /var/tmp 1777 root root

# Clear CUPS user data during logout.
# Certificates in /run/cups/certs are not removed.
R /var/{cache,spool}/cups

# Create a file which helps send-boot-elog-metrics.conf.
f= /var/lib/metrics/elog-last-line 0644 root root

# Create a file which helps boot-update-firmware.conf.
f= /var/lib/boot-update-firmware/last-os-version 0644 root root