Created attachment 76407 [details] [review] 0001-Add-enable-admin-group-build-option.patch Two major choices are wheel/sudo; that's unlikely to unify anytime soon, so let's make it build-time configurable. https://bugzilla.gnome.org/show_bug.cgi?id=695419 --- configure.ac | 21 +++++++++++++++++++++ src/daemon.c | 2 +- src/user.c | 6 +++--- 3 files changed, 25 insertions(+), 4 deletions(-)
don't forget about adm which we need in addition to wheel for journalctl to work
(In reply to comment #1) > don't forget about adm which we need in addition to wheel for journalctl to > work I don't see any references to adm in the source code at the moment, so this patch isn't regressing anything? Also fwiw it's no longer "adm" apparently: http://lists.freedesktop.org/archives/systemd-devel/2013-March/009496.html " * The journal files are now owned by a new group "systemd-journal", which exists specifically to allow access to the journal, and nothing else. Previously, we used the "adm" group for that, which however possibly covers more than just journal/log file access. "
yea no regressions. Feel free to push your patch.
Oh from your link even: Note that "make install" will also set FS ACLs up for /var/log/journal to give "adm" and "wheel" read access to it So that problem is fixed now anyway.
pushed
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.