mirror of
https://github.com/systemd/systemd.git
synced 2024-11-05 15:21:37 +03:00
15fcdc98cf
If the /var/log/journal directory is created with rigths 700, the application of an ACL rules without any primary group right sets it to 0. A chmod 755 on this file will then only set the ACL mask and let the ACL primary group right to 0. The directory is then unreadable for the primary group. This patch explicitly sets the primary group to avoid this problem. Fixes #5264.
74 lines
2.9 KiB
Plaintext
74 lines
2.9 KiB
Plaintext
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
# See tmpfiles.d(5) for details
|
|
|
|
d /run/user 0755 root root -
|
|
F! /run/utmp 0664 root utmp -
|
|
|
|
d /run/systemd/ask-password 0755 root root -
|
|
d /run/systemd/seats 0755 root root -
|
|
d /run/systemd/sessions 0755 root root -
|
|
d /run/systemd/users 0755 root root -
|
|
d /run/systemd/machines 0755 root root -
|
|
d /run/systemd/shutdown 0755 root root -
|
|
m4_ifdef(`ENABLE_NETWORKD',
|
|
d /run/systemd/netif 0755 systemd-network systemd-network -
|
|
d /run/systemd/netif/links 0755 systemd-network systemd-network -
|
|
d /run/systemd/netif/leases 0755 systemd-network systemd-network -
|
|
)m4_dnl
|
|
|
|
d /run/log 0755 root root -
|
|
|
|
z /run/log/journal 2755 root systemd-journal - -
|
|
Z /run/log/journal/%m ~2750 root systemd-journal - -
|
|
m4_ifdef(`HAVE_ACL',`m4_dnl
|
|
m4_ifdef(`ENABLE_ADM_GROUP',`m4_dnl
|
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
|
a+ /run/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x
|
|
a+ /run/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x
|
|
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--,group:wheel:r--
|
|
'',``
|
|
a+ /run/log/journal/%m - - - - d:group:adm:r-x
|
|
a+ /run/log/journal/%m - - - - group:adm:r-x
|
|
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--
|
|
'')',`m4_dnl
|
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
|
a+ /run/log/journal/%m - - - - d:group:wheel:r-x
|
|
a+ /run/log/journal/%m - - - - group:wheel:r-x
|
|
a+ /run/log/journal/%m/*.journal* - - - - group:wheel:r--
|
|
'')')')m4_dnl
|
|
|
|
z /var/log/journal 2755 root systemd-journal - -
|
|
z /var/log/journal/%m 2755 root systemd-journal - -
|
|
z /var/log/journal/%m/system.journal 0640 root systemd-journal - -
|
|
m4_ifdef(`HAVE_ACL',`m4_dnl
|
|
m4_ifdef(`ENABLE_ADM_GROUP',`m4_dnl
|
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
|
a+ /var/log/journal - - - - d:group::r-x,d:group:adm:r-x,d:group:wheel:r-x
|
|
a+ /var/log/journal - - - - group::r-x,group:adm:r-x,group:wheel:r-x
|
|
a+ /var/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x
|
|
a+ /var/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x
|
|
a+ /var/log/journal/%m/system.journal - - - - group:adm:r--,group:wheel:r--
|
|
'', ``
|
|
a+ /var/log/journal - - - - d:group::r-x,d:group:adm:r-x
|
|
a+ /var/log/journal - - - - group::r-x,group:adm:r-x
|
|
a+ /var/log/journal/%m - - - - d:group:adm:r-x
|
|
a+ /var/log/journal/%m - - - - group:adm:r-x
|
|
a+ /var/log/journal/%m/system.journal - - - - group:adm:r--
|
|
'')',`m4_dnl
|
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
|
a+ /var/log/journal - - - - d:group::r-x,d:group:wheel:r-x
|
|
a+ /var/log/journal - - - - group::r-x,group:wheel:r-x
|
|
a+ /var/log/journal/%m - - - - d:group:wheel:r-x
|
|
a+ /var/log/journal/%m - - - - group:wheel:r-x
|
|
a+ /var/log/journal/%m/system.journal - - - - group:wheel:r--
|
|
'')')')m4_dnl
|
|
|
|
d /var/lib/systemd 0755 root root -
|
|
d /var/lib/systemd/coredump 0755 root root 3d
|