[systemd units] Allowing access to the configs for the admin's own editors.

[TriMoon]

To assist admins to easier access the directory tree under /etc/opensnitchd i created two units.
This will automatically add ACL's to the files/dirs whenever they are changed/created.
This way you don't need to run your editors as root just to view/edit the files under that tree.
I hope it will benefit some people 😉

---

1. # /etc/systemd/system/allowAdminAccess-opensnitchd.path
   [Unit]
   Description=Allow access to %j configurations by admins.
   Documentation=man:systemd.path
   Documentation=man:systemd.unit
   ConditionPathExists=%E/%j
   
   [Path]
   PathModified=%E/%j
   PathModified=%E/%j/rules
   PathModified=%E/%j/lists
   
   [Install]
   WantedBy=paths.target

   • You are able to add more directories to watch using drop-ins for the path unit, fe. Using the files in [Feature Request] Enhanced CIDR support #1022:

      # /etc/systemd/system/allowAdminAccess-opensnitchd.path.d/MULTICAST-nets.conf
      [Path]
      PathModified=%E/%j/lists/MULTICAST-nets

2. # /etc/systemd/system/allowAdminAccess-opensnitchd.service
   [Unit]
   Description=Allow access to %j configurations by admins.
   Documentation=man:systemd.service
   Documentation=man:systemd.unit
   ConditionPathExists=%E/%j
   Wants=allowAdminAccess-%j.path
   After=allowAdminAccess-%j.path
   
   [Service]
   Type=oneshot
   # First remove the extended ACL's
   ExecStartPre=setfacl --recursive --remove-all %E/%j
   # Then apply the new ones, else things can get messed-up.
   ExecStart=setfacl --recursive -m g:sudo:rwX,d:g:sudo:rwX %E/%j

   • The admin group used is sudo in this configuration, feel free to change to a different group as needed...