This bug was fixed in the package rsyslog - 8.2001.0-1ubuntu1.1
---
rsyslog (8.2001.0-1ubuntu1.1) focal; urgency=medium
* d/rsyslog.postinst: (LP: #1890177)
- Fix Permission denied access to /dev/console
for privilege drop user and group syslog:syslog.
-- Eric Desrochers
** Tags removed: verification-needed verification-needed-focal
** Tags added: verification-done verification-done-focal
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890177
Title:
rsyslogd: file
Looks like the fix works. Two rotations happened since I installed the
update and we've had no errors since then.
Thanks again,
Zach
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890177
Title:
@zack
You could wait until the logrotate happen and restart rsyslog or you
could simply do manual restart using 'systemctl restart rsyslog' and
then look in /var/log/syslog.
What triggers the error is at rsyslog startup from what I have notice
during my test.
- Eric
--
You received this bug
@zack
You could wait until the logrotate happen that will then restart rsyslog
itself or you could simply do a manual restart using 'systemctl restart
rsyslog' and then look in /var/log/syslog.
What triggers the error is at rsyslog startup from what I have notice
during my test.
- Eric
--
You
I've installed the proposed package on an affected system. I think this
only affects us after a log rotation, so will let it sit over the
weekend and report back on Monday. Thank you for the patch.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
I have retry the test, it is failing on 'systemd-fsckd'.
Let's see.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890177
Title:
rsyslogd: file '/dev/console': open error: Permission denied
To
I have retried the autpkgtest test on ppc64el. It is failing on
'systemd-fsckd'.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890177
Title:
rsyslogd: file '/dev/console': open error: Permission
Hello Eric, or anyone else affected,
Accepted rsyslog into focal-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/rsyslog/8.2001.0-1ubuntu1.1 in a
few hours, and then in the -proposed repository.
Please help us by testing this new package. See
** Description changed:
[Impact]
At the moment rsyslog cannot have access /dev/console due to a mismatch
permission/ownership between '/dev/console' and the Privilege Drop User
and Group 'syslog' in rsyslog.
[Test Case]
- * Deploy focal/20.04LTS
+ * Deploy focal/20.04LTS
Thanks @sil2100 for your pre-approval comment.
I have uploaded it into focal upload queue.
It is now waiting for the official SRU team approval in order to start building
in focal-proposed for the verification test phase.
- Eric
--
You received this bug notification because you are a member
** Description changed:
+ [Impact]
+
+ At the moment rsyslog cannot have access /dev/console due to a mismatch
+ permission/ownership between '/dev/console' and the Privilege Drop User
+ and Group 'syslog' in rsyslog.
+
+ [Test Case]
+
+ * Deploy focal/20.04LTS
+ * Install rsyslog
+ *
** Changed in: rsyslog (Ubuntu Focal)
Status: New => In Progress
** Changed in: rsyslog (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: rsyslog (Ubuntu Focal)
Assignee: (unassigned) => Eric Desrochers (slashd)
--
You received this bug notification because you are a
Ok, thinking about it for a moment, I can't actually think of a way how
this could have any adverse effects. rsyslog is anyway a very privileged
thing (just by checking the capabilities), so adding it to tty should
not really have any effect (as it already is meant to have rw access to
tty's).
One easy fix would possibly be the following:
# debian/rsyslog.postinst
case "$1" in
configure)
adduser --system --group --no-create-home --quiet syslog || true
adduser syslog adm || true
+adduser syslog tty || true
I have tested it in a PPA, and it works just fine:
https://wiki.debian.org/SystemGroups
tty: TTY devices are owned by this group. This is used by write and wall
to enable them to write to other people's TTYs, but it is not intended
to be used directly.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
One easy fix would possibly be the following:
# debian/rsyslog.postinst
case "$1" in
configure)
adduser --system --group --no-create-home --quiet syslog || true
adduser syslog adm || true
+adduser syslog tty || true
I'll give it a try and test.
--
You received this
17 matches
Mail list logo
