diff --git a/contrib/systemd/system/podman.socket b/contrib/systemd/system/podman.socket index 397058ee45..5e622ef2f8 100644 --- a/contrib/systemd/system/podman.socket +++ b/contrib/systemd/system/podman.socket @@ -5,6 +5,7 @@ Documentation=man:podman-system-service(1) [Socket] ListenStream=%t/podman/podman.sock SocketMode=0660 +DirectoryMode=0700 [Install] WantedBy=sockets.target diff --git a/contrib/tmpfile/podman.conf b/contrib/tmpfile/podman.conf index 42fe0ca3f5..38507b97a4 100644 --- a/contrib/tmpfile/podman.conf +++ b/contrib/tmpfile/podman.conf @@ -12,7 +12,6 @@ R! /tmp/containers-user-* x /tmp/run-*/libpod R! /tmp/run-*/libpod D! /var/lib/containers/storage/tmp 0700 root root -D! /run/podman 0700 root root # Remove /var/tmp/container_images* podman temporary directories on each # boot which are created when pulling or saving images. R! /var/tmp/container_images*