On 26.08.2023 15:46, Michael Biebl wrote:
Reading system logs is a privileged operation.
It is not about reading logs but about being able to "systemctl status some-system-unit"
You can grant this privilege to individual users by adding them to the systemd-journal (or adm) group.
The question was how to prevent normal users from seeing system unit status.
