[arch-dev-public] FYI: systemd 198
Evangelos Foutras
evangelos at foutrelis.com
Fri Mar 8 03:50:56 EST 2013
On 8 March 2013 02:35, Tom Gundersen <teg at jklm.no> wrote:
> * The journal files are now owned by a new group
> "systemd-journal", which exists specifically to allow access
> to the journal, and nothing else. Previously, we used the
> "adm" group for that, which however possibly covers more
> than just journal/log file access. This new group is now
> already used by systemd-journal-gatewayd to ensure this
> daemon gets access to the journal files and as little else
> as possible. Note that "make install" will also set FS ACLs
> up for /var/log/journal to give "adm" and "wheel" read
> access to it, in addition to "systemd-journal" which owns
> the journal files. We recommend that packaging scripts also
> add read access to "adm" + "wheel" to /var/log/journal, and
> all existing/future journal files. To normal users and
> administrators little changes, however packagers need to
> ensure to create the "systemd-journal" system group at
> package installation time.
I think the above was missed in the systemd 198-1 package.
More information about the arch-dev-public
mailing list