picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

journal: make gatewayd run under its own user ID

This commit is contained in:
Lennart Poettering 2013-03-05 19:15:31 +01:00
parent 37c0e8f35e
commit 37495eede9
2 changed files with 14 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
README
View File

@ -101,11 +101,12 @@ REQUIREMENTS:
pass the same DESTDIR to 'make sphinx-html' invocation. pass the same DESTDIR to 'make sphinx-html' invocation.
USERS AND GROUPS: USERS AND GROUPS:
Default udev rules use the following standard system group names,\ Default udev rules use the following standard system group
which need to be resolvable by getgrnam() at any time, even in the names, which need to be resolvable by getgrnam() at any time,
very early boot stages, where no other databases and network is even in the very early boot stages, where no other databases
available: and network are available:
tty, dialout, kmem, video, audio, lp, floppy, cdrom, tape, disk
tty, dialout, kmem, video, audio, lp, floppy, cdrom, tape, disk
During runtime the journal daemon requires the During runtime the journal daemon requires the
"system-journal" system group to exist. New journal files will "system-journal" system group to exist. New journal files will
@ -119,6 +120,11 @@ USERS AND GROUPS:
# setfacl -nm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/ # setfacl -nm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/
The journal gateway daemon requires the
"system-journal-gateway" system user and group to
exist. During execution this network facing service will drop
privileges and assume this uid/gid for security reasons.
WARNINGS: WARNINGS:
systemd will warn you during boot if /etc/mtab is not a systemd will warn you during boot if /etc/mtab is not a
symlink to /proc/mounts. Please ensure that /etc/mtab is a symlink to /proc/mounts. Please ensure that /etc/mtab is a

3
units/systemd-journal-gatewayd.service.in
View File

@ -11,6 +11,9 @@ Requires=systemd-journal-gatewayd.socket
[Service] [Service]
ExecStart=@rootlibexecdir@/systemd-journal-gatewayd ExecStart=@rootlibexecdir@/systemd-journal-gatewayd
User=systemd-journal-gateway
Group=systemd-journal-gateway
SupplementaryGroups=systemd-journal
[Install] [Install]
Also=systemd-journal-gatewayd.socket Also=systemd-journal-gatewayd.socket