ensure that the sshd privilege separation directory exists (#480)

Adds /usr/lib/tmpfiles.d/sshd-priv-sep.conf to ensure that /run/sshd exists on all boots. Addresses #478
python · Aug 26, 2024 · 7d6b40b · 7d6b40b
1 parent 87e9f09
commit 7d6b40b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/salt/ssh/init.sls b/salt/ssh/init.sls
@@ -21,6 +21,15 @@ ssh:
     - mode: "0644"
 
 
+/usr/lib/tmpfiles.d/sshd-priv-sep.conf:
+  file.managed:
+    - contents: |
+        d /run/sshd 0755 root root
+    - user: root
+    - group: root
+    - mode: "0644"
+
+
 # If we have defined host keys for this server, then we want to drop them here
 # instead of whatever is here by default.
 {% for fn in host_keys %}