picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Systemd/src/journal
History
Lennart Poettering a24c64f03f journald: introduce new "systemd-journal" group and make it own the journal files 
Previously all journal files were owned by "adm". In order to allow
specific users to read the journal files without granting it access to
the full "adm" powers, introduce a new specific group for this.

"systemd-journal" has to be created by the packaging scripts manually at
installation time. It's a good idea to assign a static UID/GID to this
group, since /var/log/journal might be shared across machines via NFS.

This commit also grants read access to the journal files by default to
members of the "wheel" and "adm" groups via file system ACLs, since
these "almost-root" groups should be able to see what's going on on the
system. These ACLs are created by "make install". Packagers probably
need to duplicate this logic in their postinst scripts.

This also adds documentation how to grant access to the journal to
additional users or groups via fs ACLs.
2013-03-05 18:59:03 +01:00
..
.gitignore journald: parse configuration file 2012-01-04 20:40:04 +01:00
browse.html journal: implement filtering in browse.html 2012-10-18 22:34:42 +02:00
cat.c build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
catalog.c shared: conf-files - add root parameter 2013-02-08 10:23:04 +01:00
catalog.h journal: implement message catalog 2012-11-15 23:09:07 +01:00
compress.c journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
compress.h journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
coredump.c coredump: bump coredump truncation size from 24M to 768M 2013-03-01 19:22:30 +01:00
coredumpctl.c build-sys: drop all distribution specfic checks 2013-01-04 23:26:21 +01:00
fsprg.c journal: validate timestamps as well 2012-08-19 15:16:11 +02:00
fsprg.h journald: initial version of FSPRG hookup 2012-08-13 20:31:10 +02:00
journal-authenticate.c journal: add ability to list values a specified field can take in all entries of the journal 2012-10-18 03:35:18 +02:00
journal-authenticate.h journald: don't reposition window if we don't have to 2012-09-13 17:06:04 +02:00
journal-def.h journal: move _packed_ attribute to the end 2012-12-17 11:41:31 +01:00
journal-file.c journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
journal-file.h journal: introduce entry array chain cache 2012-10-26 03:24:03 +02:00
journal-gatewayd.c added some missing include for a5c32cff1f 2013-02-14 16:37:31 +01:00
journal-internal.h journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
journal-qrcode.c journal: include machine ID in QR code 2012-08-20 22:11:38 +02:00
journal-qrcode.h journalctl: output FSS key as QR code on generating 2012-08-20 22:02:19 +02:00
journal-send.c journal: fix warning about pointer arithmetic 2012-11-25 21:43:44 +01:00
journal-vacuum.c journal: fix potential integer overflow 2012-10-17 21:25:42 +02:00
journal-vacuum.h journal: implement time-based rotation/vacuuming 2012-10-16 22:58:07 +02:00
journal-verify.c journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
journal-verify.h journald: always pass first entry timestamp back from journal_file_verify() 2012-09-24 15:02:43 +02:00
journalctl.c journald: introduce new "systemd-journal" group and make it own the journal files 2013-03-05 18:59:03 +01:00
journald-console.c build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-console.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-gperf.gperf build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-kmsg.c build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-kmsg.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-native.c journal: fix SO_PASSSEC invocation 2012-11-23 18:35:27 +01:00
journald-native.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-rate-limit.c journal: the ratelimiter is part of journald 2012-08-22 03:43:45 +02:00
journald-rate-limit.h journal: the ratelimiter is part of journald 2012-08-22 03:43:45 +02:00
journald-server.c journald: introduce new "systemd-journal" group and make it own the journal files 2013-03-05 18:59:03 +01:00
journald-server.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-stream.c build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-stream.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-syslog.c build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald-syslog.h build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald.c build-sys: store journald code in a noinst library 2012-11-14 23:39:53 +01:00
journald.conf journald.conf: remove MinSize= settings 2012-10-19 00:56:42 +02:00
libsystemd-journal.pc.in relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
libsystemd-journal.sym journal: by default do not decompress dat objects larger than 64K 2012-11-21 00:28:00 +01:00
lookup3.c journal: fix build in VALGRIND compatibility mode 2012-10-13 14:40:32 +02:00
lookup3.h use #pragma once instead of foo*foo #define guards 2012-07-19 12:30:59 +02:00
Makefile journal: add preliminary incomplete implementation 2011-10-07 22:02:05 +02:00
microhttpd-util.c journal-gatewayd: redirect microhttpd messages to journal 2013-01-18 01:15:54 -05:00
microhttpd-util.h journal-gatewayd: redirect microhttpd messages to journal 2013-01-18 01:15:54 -05:00
mmap-cache.c journal: Set the last_unused pointer correctly when attaching an unused window 2012-10-16 16:14:46 +02:00
mmap-cache.h journal: bring mmap cache prototype in sync 2012-09-22 00:16:13 +02:00
sd-journal.c log-show: look at everything in /run/log/journal 2013-02-26 23:16:58 -05:00
test-catalog.c journal: implement message catalog 2012-11-15 23:09:07 +01:00
test-journal-enum.c journal: introduce entry array chain cache 2012-10-26 03:24:03 +02:00
test-journal-match.c journal: beef up journal matches considerably 2012-07-13 00:32:32 +02:00
test-journal-send.c test: extend test-send to send some weirder data 2012-10-26 01:18:41 +02:00
test-journal-stream.c journal: add ability to list values a specified field can take in all entries of the journal 2012-10-18 03:35:18 +02:00
test-journal-syslog.c use streq instead of strcmp 2013-02-13 18:14:20 +01:00
test-journal-verify.c journal: make libgcrypt dependency optional 2012-08-20 16:51:46 +02:00
test-journal.c journal: add ability to list values a specified field can take in all entries of the journal 2012-10-18 03:35:18 +02:00
test-mmap-cache.c journal: add missing test file 2012-09-24 10:18:10 +02:00