diff --git a/src/core/namespace.c b/src/core/namespace.c index 026018438c..a38bad1474 100644 --- a/src/core/namespace.c +++ b/src/core/namespace.c @@ -1148,6 +1148,8 @@ static int mount_private_dev(const MountEntry *m, const NamespaceParameters *p) FOREACH_STRING(d, "/dev/mqueue", "/dev/hugepages") (void) bind_mount_device_dir(temporary_mount, d); + /* We assume /run/systemd/journal/ is available if not changing root, which isn't entirely accurate + * but shouldn't matter, as either way the user would get ENOENT when accessing /dev/log */ if ((!p->root_image && !p->root_directory) || p->bind_journal_sockets) { const char *devlog = strjoina(temporary_mount, "/dev/log"); if (symlink("/run/systemd/journal/dev-log", devlog) < 0)