mirror of
https://github.com/systemd/systemd.git
synced 2026-08-09 09:32:04 +00:00
f195b1c1a8
In Ubuntu, rsyslog is (a) part of the minimal image and (b) does not run as root. To facilitate this, the rsyslog package configures /var/log to be writeable by the syslog group. There are currently conflicts in the Ubuntu packaging due to the way tmpfiles are handled in package scripts: when systemd-tmpfiles is invoked with both configurations (or for all configurations), things work fine. But if invoked with only var.conf, which is the default case for package upgrades, rsyslog is broken. One suggestion to approach this was to make rsyslog's tmpfile configuration use ACLs instead of trying to change the owning group and directory mode. This can work, but since the ACL mask is stored in the group permission bits, the effective mask for rsyslog becomes r-x again when var.conf is invoked, because it sees that 0775 != 0755, and chmods the directory. Hence, for /var/log write permisssions to be extendable with ACLs, the mode must be at least 0775. Rather than change the default, add a build option to configure the /var/log mode.
Files in this directory contain configuration for systemd-tmpfiles, a program to create, delete, and clean up volatile and temporary files and directories. See man:tmpfiles.d(5) for explanation of the configuration file format, and man:systemd-tmpfiles(8) for a description of when and how this configuration is applied. Use 'systemd-analyze cat-config tmpfiles.d' to display the effective config.