Hacker News Reader

Comment by rtontic | Hacker News Reader

I actually just make my personal home directory in the root of the filesystem. So /me. If /root can have it, why can't I? It is my machine after all.

View on HN

Exactly! Fixing /home/<user> is a lost cause. You can't get thousands of applications to follow a common sense standard. It's more pragmatic to not store the files you care about in the dumping ground that's /home/ .

Not all OSs let alone all Unix OS have your home directory in /home so that is even less useful than xdg

Beware that any directory other than one under /home might not enjoy the same protections by default by other programs, like systemd’s ProtectHome setting. You’ll also probably want to adjust some settings, like AppArmor’s @{HOMEDIRS} setting.

Does systemd really hardcode "/home" rather than use the user's actual home directory?

Systemd needs the common parent directory of the home directory of all users on the system, in order to protect all user home directories from services. There is no “the” user.

I did misplace the apostrophe. There is no guaranteed common parent directory of all users other than `/`.

Systemd wants to provide an option of limiting services from writing, and optionally also from reading, in the home directories of all users. However, there is no reasonable algorithm to discover a single common parent directory which would not also risk encompassing other directories which should not be restricted, so the hardcoded /home is used by the ProtectHome option. If you have home directories somewhere else, but want the same protection by systemd, you will have to use the InaccessiblePaths or ReadOnlyPaths option for all individual system services which you want to restrict in this manner.

I think GP misspoke a bit, but the GGP was suggesting to let $HOME point to /home/user, but to put your actual data in /me. That way apps can "make a mess" in /home/user/.dot-files-galore, while your documents and so on are alone in /me/important-file.txt.

GP then was cautioning that this leaves your most important files at the whims of Unix's simplistic user permissions model, unless you also point systemd and/or AppArmor towards /me.

Reply on news.ycombinator.com