SystemD ProtectSystem=full still can write File in /etc outside of WorkingDir or WritePath

From	Philipp Ewald <philipp.ewald@digionline.de>
Newsgroups	linux.debian.user
Subject	SystemD ProtectSystem=full still can write File in /etc outside of WorkingDir or WritePath
Date	2025-06-25 12:00 +0200
Message-ID	<L1v57-d1Wb-3@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello,

is it normal that a Service started with systemd still can write files ouitside it working dir?

The prozess itsselft has it own "cd", does this break the Security setting is systemd?

ProtectSystem=full should be read-only /etc
what is the point of this settig if the process still can write there?


kind regards
-- 
Philipp Ewald
Administrator

DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln
Fax: +49 221 6500-690, E-Mail: philipp.ewald@digionline.de

AG Köln HRB 27711, St.-Nr. 5215 5811 0640
Geschäftsführer: Werner Grafenhain

Informationen zum Datenschutz: www.digionline.de/ds

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

SystemD ProtectSystem=full still can write File in /etc outside of  WorkingDir or WritePath Philipp Ewald <philipp.ewald@digionline.de> - 2025-06-25 12:00 +0200
  Re: SystemD ProtectSystem=full still can write File in /etc outside  of WorkingDir or WritePath Andy Smith <andy@strugglers.net> - 2025-06-25 13:40 +0200
    Resolved: SystemD ProtectSystem=full still can write File in /etc  outside of WorkingDir or WritePath Philipp Ewald <philipp.ewald@digionline.de> - 2025-06-25 14:50 +0200
      Re: Resolved: SystemD ProtectSystem=full still can write File in  /etc outside of WorkingDir or WritePath Andy Smith <andy@strugglers.net> - 2025-06-25 15:40 +0200
  Re: SystemD ProtectSystem=full still can write File in /etc outside  of WorkingDir or WritePath Greg Wooledge <greg@wooledge.org> - 2025-06-25 13:40 +0200

csiph-web