mirror of
https://github.com/systemd/systemd.git
synced 2026-06-30 19:57:29 +00:00
53fc4c48e7
This also relaxes the inode access modes a bit, in case they were set to 0600: we now set the "r" bit too, i.e. use 0644. This is beneficial since it permits unpriv code to read the xattrs of the entrypoints (which require read access). Note that in order to be able to connect() to a socket inode you need write access, hence this shouldn't compromise security in any way.
28 lines
823 B
SYSTEMD
28 lines
823 B
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Journal Log Access Socket
|
|
Documentation=man:journalctl(1)
|
|
DefaultDependencies=no
|
|
Before=sockets.target
|
|
After=systemd-sysusers.service
|
|
|
|
[Socket]
|
|
ListenStream=/run/systemd/io.systemd.JournalAccess
|
|
Symlinks=/run/varlink/registry/io.systemd.JournalAccess
|
|
FileDescriptorName=varlink
|
|
SocketGroup=systemd-journal
|
|
SocketMode=0664
|
|
Accept=yes
|
|
MaxConnectionsPerSource=16
|
|
XAttrEntryPoint=user.varlink=entrypoint
|
|
XAttrListen=user.varlink=listen
|
|
XAttrAccept=user.varlink=server
|