From: Philip Meulengracht <the_meulengracht@hotmail.com>
Date: Wed, 12 Nov 2025 13:50:06 +0000 (+0100)
Subject: [PATCH] data/systemd-tmpfiles: protect the per-snap tmp (#16197)
X-Git-Tag: archive/raspbian/2.57.6-1+rpi1+deb12u1^2~2
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/%22mailto:mocancezar%40gmail.com//%22mailto:i18n-csb%40linuxcsb.org/%22/%22http:/www.example.com/%22mailto:mocancezar%40gmail.com/%22mailto:i18n-csb%40linuxcsb.org/%22?a=commitdiff_plain;h=edfb50e92c327dd94ea671c10644814cdbbdd48f;p=snapd.git

[PATCH] data/systemd-tmpfiles: protect the per-snap tmp (#16197)

Protect the per-snap tmp directory against being reaped by age

Gbp-Pq: Name data-systemd-tmpfiles-protect-the-per-snap-tmp-16197.patch
---

diff --git a/data/systemd-tmpfiles/snapd.conf b/data/systemd-tmpfiles/snapd.conf
index 03c9bb07..da8f1c38 100644
--- a/data/systemd-tmpfiles/snapd.conf
+++ b/data/systemd-tmpfiles/snapd.conf
@@ -1 +1,7 @@
 D! /tmp/snap-private-tmp 0700 root root -
+
+# make sure the snap's private tmp folders are 
+# not reaped by age if configured by the system (noble+)
+# this will still let the contents be reaped, just not the
+# folder itself
+X /tmp/snap-private-tmp/*/tmp