tmpfiles.d: Add run/uscreens

[donald]

We plan to remove setuid-root from screen. For that to work, /run/uscreens must be writable by normal users.

[pmenzel]

Debian has:

$ grep screen /lib/tmpfiles.d/*
/lib/tmpfiles.d/screen-cleanup.conf:d /run/screen 0777 root utmp

Is uscreens a widespread solution?

[pmenzel]

Ah, we configure it that way:

    bee_configure \
        --with-socket-dir=/run/uscreens \

[pmenzel]

I think you said something about fixing something up on the running systems. Could you document, what you did? Just change the permission on /run/uscreens?

[donald]

From memory:

pdist push ALL --files /etc/tmpfiles.d/run-uscreens.conf --post "systemd-tmpfiles --create" --para 10

However, this was wrong, because the old (setuid) screen didn't like the (01777) mode, so we got errors and I had to push the new screen binary as well (pdist push ALL --files /usr/bin --para 10)