Your message dated Tue, 28 Apr 2015 22:34:35 +0200
with message-id <[email protected]>
and subject line Re: Bug#783651: users in adm group can't use journalctl if
persistent journal isn't enabled
has caused the Debian Bug report #783651,
regarding users in adm group can't use journalctl if persistent journal isn't
enabled
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
783651: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783651
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: systemd
Version: 215-17
Severity: normal
The README.Debian for systemd instructs to set ACLs for /var/log/journal
to let users in "adm" group to read the persistent journal via
journalctl. This works well; but if the persistent journal isn't
enabled, users in "adm" group can't read the journal with journalctl:
$ getfacl /run/log/journal
# file: run/log/journal
# owner: root
# group: systemd-journal
# flags: -s-
user::rwx
group::r-x
other::r-x
$ getfacl /run/log/journal/3deacfa10d0c169adfdeb36c50522bd6/
# file: run/log/journal/3deacfa10d0c169adfdeb36c50522bd6/
# owner: root
# group: systemd-journal
# flags: -s-
user::rwx
group::r-x
other::---
systemd should set ACLs the same way as advertised for /var/log/journal
in README.Debian, so that members of the adm group should be able to use
journalctl even if persistent journal isn't enabled.
Additionally, I stumbled upon something else; I don't know if it's
expected behavior, or if it deserves a bug report, but if the persistent
journal is enabled, /run/log/journal is only readable by root, and not
the systemd-journal group. This causes no trouble, except a minor and
temporary inconsistency in case one disables the persistent journal by
deleting /var/log/journal and restarting systemd-journald; the right
permissions for /run/log/journal (group systemd-journal) wouldn't be
applied until next reboot.
Regards,
--
Raphaël Halimi
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Version: 219-1
Am 28.04.2015 um 20:36 schrieb Raphaël Halimi:
> Package: systemd
> Version: 215-17
> Severity: normal
>
> The README.Debian for systemd instructs to set ACLs for /var/log/journal
> to let users in "adm" group to read the persistent journal via
> journalctl. This works well; but if the persistent journal isn't
> enabled, users in "adm" group can't read the journal with journalctl:
>
Fixed upstream by
commit a48a62a1af02aec4473c9deed98dd5b89d210f93
Author: Zbigniew Jędrzejewski-Szmek <[email protected]>
Date: Sun Jan 18 15:05:40 2015 -0500
tmpfiles: use ACL magic on journal directories
Is available in experimental. Thus closing.
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
