FS#39181 - [systemd] volatile journal has wrong permissions

Attached to Project: Arch Linux
Opened by Daniil Bolsun (facecool) - Wednesday, 05 March 2014, 07:31 GMT
Last edited by Dave Reisner (falconindy) - Saturday, 05 April 2014, 16:50 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Dave Reisner (falconindy)
Tom Gundersen (tomegun)
Architecture x86_64
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
When systemd journal storage set to 'volatile', file /run/log/journal/<machine-id>/system.journal has permissions 0640 and owner root:root. Which makes impossible for non-root user (even in systemd-journal group) to access logs.

Additional info:
* package version(s): systemd 210-2

Steps to reproduce:
Set Storage=volatile in /etc/systemd/journald.conf and reboot to apply settings.
   journald.conf (0.8 KiB)
This task depends upon

Closed by  Dave Reisner (falconindy)
Saturday, 05 April 2014, 16:50 GMT
Reason for closing:  Upstream
Additional comments about closing:  Patches welcome uptream to support an 'M' option which would be a recursive version of 'm'.
Comment by Dave Reisner (falconindy) - Wednesday, 05 March 2014, 16:35 GMT
You can fix this in /etc/tmpfiles.d with:

m /run/log/journal/%m/system.journal 0644 root systemd-journal - -

Upstream will need to fix the fact that the volatile journal is created before systemd-tmpfiles-setup is run, so the sticky bit of course isn't honored.

Loading...