···

       
1447
       
 
       
        DeviceAllow = "/dev/rfkill rw";

     

       
1448
       
 
       
        NoNewPrivileges = true;

     

       
1449
       
 
       
        PrivateUsers = false; # hostapd requires true root access.

     

       
1450
       
-
       
        PrivateTmp = true;

     

       
1451
       
 
       
        ProtectClock = true;

     

       
1452
       
 
       
        ProtectControlGroups = true;

     

       
1453
       
 
       
        ProtectHome = true;

     

···

       
1447
       
 
       
        DeviceAllow = "/dev/rfkill rw";

     

       
1448
       
 
       
        NoNewPrivileges = true;

     

       
1449
       
 
       
        PrivateUsers = false; # hostapd requires true root access.

     

       
1450
       
+
       
        PrivateTmp = false; # hostapd_cli opens a socket in /tmp

     

       
1451
       
 
       
        ProtectClock = true;

     

       
1452
       
 
       
        ProtectControlGroups = true;

     

       
1453
       
 
       
        ProtectHome = true;