[Nix-dev] /run/lock permissions

[Mathijs Kwik]

Hi all,

Currently, /run/lock (which is linked from /var/lock) has permission
700 root:root.
I'm packaging logcheck, which uses debian's liblockfile and
lockfile-progs, which use the /var/lock directory.
logcheck runs as its own user, so it currently cannot touch stuff in /var/lock.

What I propose:
A new group "lock".
/run/lock owned by root:lock, permission 1770 (sticky bit).

Programs that need locking can then join that group.

As this is somewhat security-related, I'm asking first if anyone has
any objections.

Have a nice weekend,
Mathijs