mirror of
https://github.com/systemd/systemd
synced 2024-07-21 10:17:21 +00:00
tmpfiles: apply ACLs to top-level journal directory in /run, too
We already apply them to the directory in /var. Let's do the same in /run too. That's because due to the log namespace logic we nowadays can gain additional subdirs there during regular operation.
This commit is contained in:
parent
0f5a4f9cd9
commit
fb38a7beb8
|
@ -32,13 +32,16 @@ Z /run/log/journal/%m ~2750 root systemd-journal - -
|
||||||
m4_ifdef(`HAVE_ACL',`m4_dnl
|
m4_ifdef(`HAVE_ACL',`m4_dnl
|
||||||
m4_ifdef(`ENABLE_ADM_GROUP',`m4_dnl
|
m4_ifdef(`ENABLE_ADM_GROUP',`m4_dnl
|
||||||
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
||||||
|
a+ /run/log/journal - - - - d:group::r-x,d:group:adm:r-x,d:group:wheel:r-x,group::r-x,group:adm:r-x,group:wheel:r-x
|
||||||
a+ /run/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x,group:adm:r-x,group:wheel:r-x
|
a+ /run/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x,group:adm:r-x,group:wheel:r-x
|
||||||
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--,group:wheel:r--
|
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--,group:wheel:r--
|
||||||
'',``
|
'',``
|
||||||
|
a+ /run/log/journal - - - - d:group::r-x,d:group:adm:r-x,group::r-x,group:adm:r-x
|
||||||
a+ /run/log/journal/%m - - - - d:group:adm:r-x,group:adm:r-x
|
a+ /run/log/journal/%m - - - - d:group:adm:r-x,group:adm:r-x
|
||||||
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--
|
a+ /run/log/journal/%m/*.journal* - - - - group:adm:r--
|
||||||
'')',`m4_dnl
|
'')',`m4_dnl
|
||||||
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
m4_ifdef(`ENABLE_WHEEL_GROUP',``
|
||||||
|
a+ /run/log/journal - - - - d:group::r-x,d:group:wheel:r-x,group::r-x,group:wheel:r-x
|
||||||
a+ /run/log/journal/%m - - - - d:group:wheel:r-x,group:wheel:r-x
|
a+ /run/log/journal/%m - - - - d:group:wheel:r-x,group:wheel:r-x
|
||||||
a+ /run/log/journal/%m/*.journal* - - - - group:wheel:r--
|
a+ /run/log/journal/%m/*.journal* - - - - group:wheel:r--
|
||||||
'')')')m4_dnl
|
'')')')m4_dnl
|
||||||
|
|
Loading…
Reference in a new issue