Bug#934284: journal sometimes with x-bit, sometimes without

[Michael Biebl]

Am 10.08.19 um 12:37 schrieb Marc Haber:
> Hi Michael,
> 
> thanks for your answer.
> 
> On Fri, Aug 09, 2019 at 04:16:06PM +0200, Michael Biebl wrote:
>> I have never seen this behaviour myself on the multitude of systems I
>> run (laptop, servers, VM, containers) so I don't really have any idea.
> 
> How closely are you watching the ACLs on the journal files?

>> What are the permissions /ACLs on
>>
>> /run/log/journal/8f018d505adf4ecaad2720811a888b04/
> 
> [4/1633]mh at oversway:~ $ ls -lad  /run/log/journal/8f018d505adf4ecaad2720811a888b04
> drwxr-s---+ 2 root systemd-journal 200 Aug 10 08:09 /run/log/journal/8f018d505adf4ecaad2720811a888b04/
> [5/1634]mh at oversway:~ $ sudo getfacl /run/log/journal/8f018d505adf4ecaad2720811a888b04 
> getfacl: Removing leading '/' from absolute path names
> # file: run/log/journal/8f018d505adf4ecaad2720811a888b04
> # owner: root
> # group: systemd-journal
> # flags: -s-
> user::rwx
> group::r-x
> group:adm:r-x
> mask::r-x
> other::---
> default:user::rwx
> default:group::r-x
> default:group:adm:r-x
> default:mask::r-x
> default:other::---
> 
> [6/1635]mh at oversway:~ $ 
> 
>> Do you have any tmpfiles which references files in /run/log ?
> 
> How would I find that out?

grep "/run/log" /etc/tmpfiles.d/* /usr/lib/tmpfiles.d/*

>> Can you exclude that non-systemd components change the permissions?
> 
> Of course not, but no components that I have installed willingly. I'll roll out
> a monitoring job that runs more often than once daily so that the change gets
> timed more exactly. Unless I report back, don't bother with more research, it
> might be a real stupid thing.
> 
> Greetings
> Marc
> 


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20190810/7c99cef0/attachment.sig>