Bug#847448: systemd: wrong permissions on non-persistent /run/log/journal
Dennis Schridde
dennis.schridde at uni-heidelberg.de
Thu Dec 8 10:31:52 GMT 2016
Package: systemd
Version: 215-17+deb8u5
Severity: important
Dear Maintainer,
I tried to run `sudo -u nobody -g systemd-journal journalctl --unit=some-system-unit.service`, but journalctl replied "No journal files were found.". If I change the group argument to "root", I can read the journal of that unit. I would expect that some non-root user could
read the journal, though, in this case to run a script as non-root that is supposed to send part of the journal via email.
The cause appears to be that /run/log/journal is owned by root:root instead of root:systemd-journal. There exists an older bug (bug #746279) where this was fixed in systemd 208-6, but the issue is back in systemd-215-17.
Best regards,
Dennis
-- Package-specific info:
-- System Information:
Debian Release: 8.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages systemd depends on:
ii acl 2.2.52-2
ii adduser 3.113+nmu3
ii initscripts 2.88dsf-59
ii libacl1 2.2.52-2
ii libaudit1 1:2.4-1+b1
ii libblkid1 2.25.2-6
ii libc6 2.19-18+deb8u6
ii libcap2 1:2.24-8
ii libcap2-bin 1:2.24-8
ii libcryptsetup4 2:1.6.6-5
ii libgcrypt20 1.6.3-2+deb8u2
ii libkmod2 18-3
ii liblzma5 5.1.1alpha+20120614-2+b3
ii libpam0g 1.1.8-3.1+deb8u1+b1
ii libselinux1 2.3-2
ii libsystemd0 215-17+deb8u5
ii mount 2.25.2-6
ii sysv-rc 2.88dsf-59
ii udev 215-17+deb8u5
ii util-linux 2.25.2-6
Versions of packages systemd recommends:
ii dbus 1.8.20-0+deb8u1
ii libpam-systemd 215-17+deb8u5
Versions of packages systemd suggests:
pn systemd-ui <none>
-- no debconf information
More information about the Pkg-systemd-maintainers
mailing list