Commit c4c50e0c authored by Michael Stapelberg's avatar Michael Stapelberg Committed by Michael Stapelberg
Browse files

allow group adm read access on /var/log/journal

Closes: #717386
parent b4151c6a
......@@ -9,6 +9,7 @@ systemd (204-6) UNRELEASED; urgency=low
* systemctl: mangle names when avoiding dbus (Closes: #723855)
* Make 99-systemd.rules check for /run/systemd/systemd instead of the
ill-named cgroups directory.
* allow group adm read access on /var/log/journal (Closes: #717386)
-- Tollef Fog Heen <tfheen@debian.org> Mon, 28 Oct 2013 14:31:16 +0100
......
......@@ -51,7 +51,8 @@ Depends: ${shlibs:Depends},
libsystemd-login0 (= ${binary:Version}),
util-linux (>= 2.19.1-2),
initscripts (>= 2.88dsf-17),
udev
udev,
acl
Breaks: lvm2 (<< 2.02.84-1),
lsb-base (<< 4.1+Debian4)
Conflicts: klogd
......
......@@ -83,4 +83,10 @@ systemd-machine-id-setup
# initial update of the Message Catalogs database
_update_catalog
# Grant read access to /var/log/journal for members of the adm group via a
# filesystem ACL. This makes them able to read the journal.
# Failure is ignored since there might be file systems mounted without ACL
# support.
setfacl -nm g:adm:rx,d:g:adm:rx /var/log/journal || true
#DEBHELPER#
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment