On Thu, Jul 30, 2026 at 04:57:50PM +0200, William David Edwards wrote: > Ondřej Surý schreef op 2026-07-30 16:46: [..] > > > > > This is obviously problematic when storing session files in /home/, > > > which is not uncommon. > > > > I would actually dispute this. I don't think this is common at all. If > > you change the defaults > > where the session files are stored, you might as well change the systemd > > unit that cleans > > the session files. > > Fair enough. I guess 'common in the web hosting space' does not equate to > 'common'. And yes, creating an override is not a problem at all.
/home is nowadays understood and expected to contain the "$HOME" directories for real, likely interactive users. ProtectHome and other mechanisms are designed to prevent leaking personal data, documents, etc. of such users. I imagine "in the web hosting space" you do not have such users, and then nowadays the various components making up the distro would expect you to store impacted files outside of /home. Hope this helps. Best, Chris
