From ddf8995fb3091d6414d2aab2945a46db828cb859 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Wed, 28 Dec 2022 17:27:37 +0100 Subject: [PATCH] man: note that DynamicUser=yes is incompatible with D-Bus Due to policy checks against system users this cannot currently work, and it is non-obvious. In the future it might be implemented if support is added to dbus-broker/dbus-daemon, e.g.: https://github.com/bus1/dbus-broker/issues/259 --- man/systemd.exec.xml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 5e6658ff061cf..78cede439c3eb 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -584,7 +584,9 @@ BindPaths= and be careful with AF_UNIX file descriptor passing for directory file descriptors, as this would permit processes to create files or directories owned by the dynamic user/group that are not subject to the lifecycle and access guarantees of the - service. Defaults to off. + service. Note that this option is currently incompatible with D-Bus policies, thus a service using + this option may currently not allocate a D-Bus service name (note that this does not affect calling + into other D-Bus services). Defaults to off.