picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Systemd/src
History
Lennart Poettering a24c64f03f journald: introduce new "systemd-journal" group and make it own the journal files 
Previously all journal files were owned by "adm". In order to allow
specific users to read the journal files without granting it access to
the full "adm" powers, introduce a new specific group for this.

"systemd-journal" has to be created by the packaging scripts manually at
installation time. It's a good idea to assign a static UID/GID to this
group, since /var/log/journal might be shared across machines via NFS.

This commit also grants read access to the journal files by default to
members of the "wheel" and "adm" groups via file system ACLs, since
these "almost-root" groups should be able to see what's going on on the
system. These ACLs are created by "make install". Packagers probably
need to duplicate this logic in their postinst scripts.

This also adds documentation how to grant access to the journal to
additional users or groups via fs ACLs.
 		2013-03-05 18:59:03 +01:00
..
ac-power unit: add ConditionACPower= 2012-12-31 21:24:26 +01:00
activate systemd-activate: add a socket-activation test tool 2013-02-27 22:10:14 -05:00
analyze systemd-analyze: free unit_times only if it is not NULL 2013-03-01 16:43:57 -05:00
ask-password build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
binfmt honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
boot bootctl: show "n/a" for empty boot option labels 2013-02-17 22:28:21 +01:00
bootchart bootchart: rename --filter to --no-filter 2013-02-16 15:16:24 -05:00
cgls systemctl,loginctl,cgls: do not ellipsize cgroup members when --full is specified 2013-01-16 12:11:47 -05:00
cgroups-agent build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
cgtop honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
core add initrd-fs.target and initrd-fs-pre.target 2013-03-04 19:33:50 +01:00
cryptsetup cryptsetup-generator: fix the kernel command line strategy for luks.uuid 2013-03-01 15:05:28 +01:00
delta use strneq instead of strncmp 2013-02-13 00:56:13 +01:00
detect-virt build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
efi-boot-generator efi: various cleanups 2013-02-13 00:12:58 +01:00
fsck honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
fstab-generator Revert "fstab-generator: place initrd /sysroot mounts in initrd-fs.target" 2013-03-05 06:45:06 +01:00
getty-generator honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
gudev licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
hostname honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
initctl build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
journal journald: introduce new "systemd-journal" group and make it own the journal files 2013-03-05 18:59:03 +01:00
kernel-install kernel-install: rename the loader entry filename 2013-02-26 15:21:23 +01:00
libsystemd-daemon sd-daemon: fix cppcheck warnings 2012-12-17 11:41:31 +01:00
libsystemd-id128 update .gitignore 2012-04-13 21:58:01 +02:00
libudev use streq instead of strcmp 2013-02-13 18:14:20 +01:00
locale honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
login logind: when registering a new session always use previous session info from cgroup path rather than audit 2013-03-05 03:35:52 +01:00
machine-id-setup build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
modules-load honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
notify env: considerably beef up environment cleaning logic 2013-02-11 03:54:50 +01:00
nspawn nspawn: environment would be truncated with TERM unset 2013-02-27 21:55:00 -05:00
nss-myhostname nss-myhostname: copy first result to preallocated buffer 2013-02-07 01:02:33 -05:00
python-systemd systemd-python: add missing check for return of PyDict_SetItem in _reader.c 2013-03-01 16:43:57 -05:00
quotacheck honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
random-seed random-seed: fix error message typo 2012-10-19 17:31:33 +02:00
rc-local-generator build-sys: make rc-local support part of SYSV compat 2013-01-04 23:26:20 +01:00
readahead honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
remount-fs service: add options RestartPreventExitStatus and SuccessExitStatus 2012-08-14 14:46:03 +02:00
reply-password build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
shared job: print the "OK" status messages in normal green 2013-03-02 17:56:32 +01:00
shutdownd honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
sleep honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
stdio-bridge use strneq instead of strncmp 2013-02-13 00:56:13 +01:00
sysctl honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
system-update-generator log.h: new log_oom() -> int -ENOMEM, use it 2012-07-26 11:48:26 +02:00
systemctl systemctl: check if iterator was initialized succesfully 2013-03-01 16:43:57 -05:00
systemd logind: add MESSAGE_IDs to interesting events 2013-01-27 23:47:18 -05:00
test test-util.c: added hexchar, unhexchar, octchar, unoctchar, decchar, undecchar tests 2013-02-26 23:56:56 +01:00
timedate honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
timestamp build-sys: add stub makefiles to all subdirs to ease development with emacs 2012-04-13 21:37:59 +02:00
tmpfiles tmpfiles: use cleanup func. to save a few lines 2013-03-03 20:16:57 -05:00
tty-ask-password-agent Revert "log_error() if inotify_add_watch() fails" 2013-02-13 16:25:33 +01:00
udev udev: fix segfault with android rndis 2013-03-03 19:02:36 +01:00
update-utmp utmp: read the right timestamp 2012-09-17 17:48:19 +02:00
vconsole honor SELinux labels, when creating and writing config files 2013-02-14 16:19:38 +01:00
.gitignore move libsystemd-id128, libsystemd-daemon to subdir 2012-04-12 15:26:39 +02:00
Makefile relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00