Lennart Poettering

This is split out of #38764, where it is used more heavily, but it makes sense on its own too I am sure.

> But the whole point of going through this exercise is to allocate and pin an fd :/. I don't see the point of adding special casing for another constant...

> I really don't see how this is simpler than just opening an fd to / once and reusing it all over the place. You need the necessary plumbing to...

> Why can't you just use AT_FDCWD with an absolute path there? because configuration files should never be read from the cwd? I mean, sure, you can make sure to...

I force pushed a new version. After the discussion on the conf call 2 weeks ago I hope this has another chance to get in. I split up the PR...

here's my rationale or all of this: I think we should really move towards moving all code that operates relative to a root dir, to early on convert specified paths...

> I still don't completely follow. If all you do with chaseat() is to resolve the path in root (IOW CHASE_AT_RESOLVE_IN_ROOT is always specified), then why wouldn't specifying AT_FDCWD +...

the subuids/subgids concept is an abomination, and really shouldn' exist if you ask me. We have better way these days, via trnasiently assigned userns uid ranges, via nsresourced. At this...

> `systemd-udevd: /usr/lib/udev/rules.d/55-Argyll.rules:161 Group 'colord' is not a system group, ignoring.` > `systemd-udevd: /usr/lib/udev/rules.d/69-cd-sensors.rules:105 Group 'colord' is not a system group, ignoring.` that looks like a bug in "colord". If...

It's fine to add ACLs to device nodes that reference non-system users/groups. But device nodes should really never be *owned* by regular users, that's just super weird and broken. I...