From 3d679f61fc6a5145b656c24750e83762ca9c38dc Mon Sep 17 00:00:00 2001 From: Finn Callies Date: Wed, 6 May 2026 11:54:34 +0200 Subject: [PATCH] pvebc: Disable unit logging to /boot MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The boot partition is not designed for log files. Disable logging of the EBC units to /boot/sics/log. Reviewed-by: Holger Dengler Signed-off-by: Finn Callies Signed-off-by: Jan Höppner --- rust/pvebc/95sel-ebc/sel-ebc-override-crypttab.service | 4 ++-- rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service | 4 ++-- rust/pvebc/95sel-ebc/sel-ebc-pvebc.service | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/rust/pvebc/95sel-ebc/sel-ebc-override-crypttab.service b/rust/pvebc/95sel-ebc/sel-ebc-override-crypttab.service index 11c1e76e..ee03a19f 100644 --- a/rust/pvebc/95sel-ebc/sel-ebc-override-crypttab.service +++ b/rust/pvebc/95sel-ebc/sel-ebc-override-crypttab.service @@ -30,8 +30,8 @@ RemainAfterExit=yes FailureAction=poweroff-immediate # boot partition is unencrypted and contains SICS so we can get logs out this way # logs do not leek any sensitive information -StandardOutput=file:/boot/sics/log -StandardError=file:/boot/sics/log +StandardOutput=console +StandardError=console [Install] RequiredBy=sel-ebc.target diff --git a/rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service b/rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service index a335ba99..77143d4a 100644 --- a/rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service +++ b/rust/pvebc/95sel-ebc/sel-ebc-paes-enforce.service @@ -20,8 +20,8 @@ FailureAction=poweroff-immediate RemainAfterExit=yes # logs do not leek any sensitive information -StandardOutput=file:/boot/sics/log -StandardError=file:/boot/sics/log +StandardOutput=console +StandardError=console [Install] RequiredBy=sel-ebc.target diff --git a/rust/pvebc/95sel-ebc/sel-ebc-pvebc.service b/rust/pvebc/95sel-ebc/sel-ebc-pvebc.service index 0965f416..70dff16e 100644 --- a/rust/pvebc/95sel-ebc/sel-ebc-pvebc.service +++ b/rust/pvebc/95sel-ebc/sel-ebc-pvebc.service @@ -29,8 +29,8 @@ RemainAfterExit=yes FailureAction=poweroff-immediate # boot partition is unencrypted and contains SICS so we can get logs out this way # logs do not leek any sensitive information -StandardOutput=file:/boot/sics/log -StandardError=file:/boot/sics/log +StandardOutput=console +StandardError=console [Install] RequiredBy=sel-ebc.target