Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-12 Thread Cecil Westerhof
On 12/12/2013 05:20 AM, Kay Sievers wrote: On Wed, Dec 11, 2013 at 11:53 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 11.12.2013 22:41, schrieb Cecil Westerhof: I tried out systemd-journal-gatewayd. But it looks like that everyone that can contact, can get log info. Is that true, or am I

Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-12 Thread Lennart Poettering
On Thu, 12.12.13 05:20, Kay Sievers (k...@vrfy.org) wrote: On Wed, Dec 11, 2013 at 11:53 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 11.12.2013 22:41, schrieb Cecil Westerhof: I tried out systemd-journal-gatewayd. But it looks like that everyone that can contact, can get log

Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-12 Thread Kay Sievers
On Thu, Dec 12, 2013 at 3:08 PM, Lennart Poettering lenn...@poettering.net wrote: On Thu, 12.12.13 05:20, Kay Sievers (k...@vrfy.org) wrote: On Wed, Dec 11, 2013 at 11:53 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 11.12.2013 22:41, schrieb Cecil Westerhof: I tried out

Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-12 Thread David Timothy Strauss
On Thu, Dec 12, 2013 at 8:15 AM, Kay Sievers k...@vrfy.org wrote: We must not give the impression that this is secure in any way, it is not, and cannot generally be used unless it is secured by other things. So, no this is not secure at all, just possibly encrypted, but I doubt that was the

[systemd-devel] No security on systemd-journal-gatewayd

2013-12-11 Thread Cecil Westerhof
I tried out systemd-journal-gatewayd. But it looks like that everyone that can contact, can get log info. Is that true, or am I overlooking something? ___ systemd-devel mailing list systemd-devel@lists.freedesktop.org

Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-11 Thread Reindl Harald
Am 11.12.2013 22:41, schrieb Cecil Westerhof: I tried out systemd-journal-gatewayd. But it looks like that everyone that can contact, can get log info. Is that true, or am I overlooking something? as far as i remeber from older posts about it the intention is that a) it is not on by

Re: [systemd-devel] No security on systemd-journal-gatewayd

2013-12-11 Thread Kay Sievers
On Wed, Dec 11, 2013 at 11:53 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 11.12.2013 22:41, schrieb Cecil Westerhof: I tried out systemd-journal-gatewayd. But it looks like that everyone that can contact, can get log info. Is that true, or am I overlooking something? as far as i