tmp directory

Gday,

Looking at the documentation in the eap file, I find this:
#  A temporary directory where the client
			#  certificates are stored.  This directory
			#  MUST be owned by the UID of the server,
			#  and MUST not be accessible by any other
			#  users.  When the server starts, it will do
			#  "chmod go-rwx" on the directory, for
			#  security reasons.  The directory MUST
			#  exist when the server starts.
			#
			#  You should also delete all of the files
			#  in the directory when the server starts.
			#
			#  Note that, on Linux systems with systemd, the
			#  /tmp directory may be restricted. In this case
			#  it may be best to use `${run_dir}/tmp` here
			#  and create the temporary directory with the
			#  systemd `RuntimeDirectory` unit option.
			#
		#	tmpdir = /tmp/radiusd



The directory (tmp/radiusd) does not exist in the freeradius docker 
image, as far as I can tell.

1. Do I need to make that directory for EAP-TLS to work?

2. If question 1 is yes, then is tmp/radiusd created in the root directory?

3. If question 2 is no, where should tmp/radiusd be created?

4. " You should also delete all of the files in the directory when the 
server starts."

Is when before or after or either? So should the files be deleted before 
starting the server or after the server is started or it doesn't matter?

Best regards,

Kat

-- 
The OpenPGP_*.asc file attached to this email is a digital certificate 
to show whether or not this email has been modified after it has been 
sent. It is a security measure to warn of any man in the middle cyber 
attack. Your email client should be checking it and warning if any 
modifications have been made. If you see this signature but not the 
file, please let me know.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-----BEGIN PGP SIGNATURE-----
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=esKp
-----END PGP SIGNATURE-----