[Pkg-libvirt-maintainers] Bug#862242: please make logs readable by group membership

[Marc Haber]

Package: libvirt-clients
Version: 3.0.0-4
Severity: wishlist

Hi,

the logs in /var/log/libvirt/qemu are created as root:root 600,
therefore one needs to be root to access them. otoh, I can start, stop,
define and destroy domains by membership in the libvirt group.

I think this is asymmetrical.

Please consider making the logs readable for members of the libvirt
group, or - if you think this would be a risk - introduce a libvirt-adm
group that can read the logs.

Greetings
Marc


-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.11.0-zgws1 (SMP w/6 CPU cores)
Locale: LANG=en_DK.utf8, LC_CTYPE=en_DK.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libvirt-clients depends on:
ii  libapparmor1        2.11.0-3
ii  libaudit1           1:2.6.7-2
ii  libavahi-client3    0.6.32-2
ii  libavahi-common3    0.6.32-2
ii  libc6               2.24-10
ii  libcap-ng0          0.7.7-3+b1
ii  libdbus-1-3         1.10.18-1
ii  libdevmapper1.02.1  2:1.02.137-2
ii  libgnutls30         3.5.8-5
ii  libnl-3-200         3.2.27-2
ii  libnl-route-3-200   3.2.27-2
ii  libnuma1            2.0.11-2.1
ii  libreadline7        7.0-2
ii  libsasl2-2          2.1.27~101-g0780600+dfsg-3
ii  libselinux1         2.6-3+b1
ii  libssh2-1           1.8.0-1
ii  libvirt0            3.0.0-4
ii  libxen-4.8          4.8.1-1+deb9u1
ii  libxml2             2.9.4+dfsg1-2.2
ii  libyajl2            2.1.0-2+b3

libvirt-clients recommends no packages.

Versions of packages libvirt-clients suggests:
ii  libvirt-daemon  3.0.0-4

-- no debconf information