a19bc6
From d38e703a133487218c91f1e76072fc6b35c0978c Mon Sep 17 00:00:00 2001
a19bc6
From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= <zbyszek@in.waw.pl>
a19bc6
Date: Sun, 29 Nov 2015 18:48:40 -0500
a19bc6
Subject: [PATCH] tmpfiles: set acls on system.journal explicitly
a19bc6
a19bc6
https://github.com/systemd/systemd/issues/1397
a19bc6
(cherry picked from commit afae249efa4774c6676738ac5de6aeb4daf4889f)
a19bc6
Resolves: #1411199
a19bc6
---
a19bc6
 tmpfiles.d/systemd.conf.m4 | 2 ++
a19bc6
 1 file changed, 2 insertions(+)
a19bc6
a19bc6
diff --git a/tmpfiles.d/systemd.conf.m4 b/tmpfiles.d/systemd.conf.m4
c62b8e
index fcd6ec0269..0575408dbe 100644
a19bc6
--- a/tmpfiles.d/systemd.conf.m4
a19bc6
+++ b/tmpfiles.d/systemd.conf.m4
a19bc6
@@ -33,11 +33,13 @@ A+ /run/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x
a19bc6
 
a19bc6
 z /var/log/journal 2755 root systemd-journal - -
a19bc6
 z /var/log/journal/%m 2755 root systemd-journal - -
a19bc6
+z /var/log/journal/%m/system.journal 0640 root systemd-journal - -
a19bc6
 m4_ifdef(`HAVE_ACL',``
a19bc6
 a+ /var/log/journal    - - - - d:group:adm:r-x,d:group:wheel:r-x
a19bc6
 a+ /var/log/journal    - - - - group:adm:r-x,group:wheel:r-x
a19bc6
 a+ /var/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x
a19bc6
 a+ /var/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x
a19bc6
+a+ /var/log/journal/%m/system.journal - - - - group:adm:r--,group:wheel:r--
a19bc6
 '')m4_dnl
a19bc6
 
a19bc6
 d /var/lib/systemd 0755 root root -