Files
systemd/man
Yu Watanabe 1cf5b39d64 core: add 'DefaultRestrictSUIDSGID' config option (#38126)
closes #37602, see there for extra motivation and considered
alternatives.

On typical systems, only few services need to create SUID/SGID files.
This often is limited to the user explicitly setting suid/sgid, the
`systemd-tmpfiles*` services, and the package manager. Allowing a
default to globally restrict creation of suid/sgid files makes it easier
to apply this restriction precisely.

## testing done
- built on aarch64-linux and x86_64-linux
- ran a VM test on x86_64-linux, checking for:
    - VM system boots successfully
    - defaults apply (both `yes`, `no`, and undefined)
    - systemd tmpfiles can set suid/sgid on journal log path
- Other services explicitly defining `RestrictSUIDSGID=no` can create
suid files
2025-07-10 13:30:07 +09:00
..
2025-05-12 15:37:47 +02:00
2024-12-25 17:00:31 +01:00
2024-11-24 01:11:42 +09:00
2025-04-07 16:56:09 +09:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-11-06 19:06:47 +09:00
2024-12-25 17:00:31 +01:00
2025-07-06 01:41:47 +09:00
2025-07-04 21:33:36 +02:00
2025-06-04 13:13:14 +09:00
2024-11-24 01:11:42 +09:00
2024-11-24 01:11:42 +09:00
2025-05-15 02:56:30 +09:00
2025-03-21 08:35:36 +09:00
2024-11-06 19:06:40 +09:00
2024-11-18 15:18:26 +09:00