Skip to content

journal-remote: change owner of and add acl to journal/remote directo…#2212

Closed
yuwata wants to merge 1 commit intosystemd:masterfrom
yuwata:journal-remote-tmpfiles
Closed

journal-remote: change owner of and add acl to journal/remote directo…#2212
yuwata wants to merge 1 commit intosystemd:masterfrom
yuwata:journal-remote-tmpfiles

Conversation

@yuwata
Copy link
Member

@yuwata yuwata commented Dec 22, 2015

…ries.

The service systemd-journal-remote cannot write received journals to /var/log/journal/remote, because of the wrong owner settings of the directory.
This pull requests fixes the owner of the directory, and add ACLs to make administrators can read the journals stored in the directories.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are those ACLs really necessary?
After all, we already set them in systemd.conf

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, I don't think we. We used to, but it was changed to non-recursive in 8b258a6.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Never mind, we set recursive acls on /var/log/journal. So we don't need to duplicate the acl setting on /var/log/journal/remote. This dir would be created after acls were already applied on /var/log/journal, so it should get the right acls. But the ownership should be fixed indeed.

@keszybz
Copy link
Member

keszybz commented Jan 15, 2016

@yuwata Can you change the commit to only change the ownership, and skip the acls?

@keszybz keszybz added the reviewed/needs-rework 🔨 PR has been reviewed and needs another round of reworks label Jan 15, 2016
@yuwata
Copy link
Member Author

yuwata commented Jan 15, 2016

Thank you for the comments. I've pushed the updated request. Please see #2332.

@yuwata yuwata closed this Jan 15, 2016
@yuwata yuwata deleted the journal-remote-tmpfiles branch March 24, 2016 02:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

journal-remote reviewed/needs-rework 🔨 PR has been reviewed and needs another round of reworks

Development

Successfully merging this pull request may close these issues.

4 participants