Generalized the title to include terminal devices (e.g. Linux virtual
terminals) as well.

I'd like to see a better way to set this up. Yes, you can add the syslog
user to the dialout and/or tty groups, but that grants access to *all*
serial/terminal devices respectively. This can have security
consequences if the syslog user is compromised, given that serial
devices can include modems, and terminal devices would encompass tty-
mode user login sessions.

The current situation is particularly awkward because
/etc/rsyslog.d/50-default.conf contains a commented-out rule that
directs logging to tty8. No mention is made of any permission issues. I
wanted to do basically that, and was puzzled for a few minutes as to why
nothing was appearing on the configured virtual terminal.

** Summary changed:

- syslog user can't write to /dev/ttyS0
+ syslog user can't write to serial or terminal devices

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1258245

Title:
  syslog user can't write to serial or terminal devices

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1258245/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to