forked from ansible-lockdown/RHEL9-CIS
28 lines
905 B
Text
28 lines
905 B
Text
|
# SPDX-License-Identifier: LGPL-2.1+
|
||
|
|
#
|
||
|
|
# This file is part of systemd.
|
||
|
|
#
|
||
|
|
# systemd is free software; you can redistribute it and/or modify it
|
||
|
|
# under the terms of the GNU Lesser General Public License as published by
|
||
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
||
|
|
# (at your option) any later version.
|
||
|
|
|
||
|
|
[Unit]
|
||
|
|
Description=Temporary Directory (/tmp)
|
||
|
|
Documentation=man:hier(7)
|
||
|
|
Documentation=https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
|
||
|
|
ConditionPathIsSymbolicLink=!/tmp
|
||
|
|
DefaultDependencies=no
|
||
|
|
Conflicts=umount.target
|
||
|
|
Before=local-fs.target umount.target
|
||
|
|
After=swap.target
|
||
|
|
|
||
|
|
[Mount]
|
||
|
|
What=tmpfs
|
||
|
|
Where=/tmp
|
||
|
|
Type=tmpfs
|
||
|
|
Options=mode=1777,strictatime,{% if rhel9cis_rule_1_1_3 %}nodev,{% endif %}{% if rhel9cis_rule_1_1_4 %}nosuid,{% endif %}{% if rhel9cis_rule_1_1_5 %}noexec{% endif %}
|
||
|
|
|
||
|
|
# Make 'systemctl enable tmp.mount' work:
|
||
|
|
[Install]
|
||
|
|
WantedBy=local-fs.target
|