Package: procps
Version: 2:3.3.17-5

Hi,

Procps includes a sysctl configuration file in /usr/lib/sysctl.d/ that
disallows root from overwriting group-writable files in setgid directories.

As this interferes with our backup script, we initially tried to
override it with a local file in /etc/sysctl.d, but this at first failed
due to the "interesting" way how systemd manages priorities among those
configuration files.

Apparently, systemd recommends to call those files NN-xyz.conf, with NN
being a pair of decimals to be used for ordering, as detailed in Lennart
Poettering's answer to this bug-report:

https://github.com/systemd/systemd/issues/20919


Procps' protect-links.conf file does unfortunately not follow this
convention. If for example the file was called 10-protect-links.conf,
sysadmins could easily override it by calling their file 99-allow-links.conf

We solved the issue locally by calling our file zz-allow-links.conf, but
I thought I'd mention this here in order to spare a lengthy search to
fellow sysadmins who might have the same need.

Thanks,

Alain

Reply via email to