Created attachment 76407 [details] [review]
Two major choices are wheel/sudo; that's unlikely to unify
anytime soon, so let's make it build-time configurable.
configure.ac | 21 +++++++++++++++++++++
src/daemon.c | 2 +-
src/user.c | 6 +++---
3 files changed, 25 insertions(+), 4 deletions(-)
don't forget about adm which we need in addition to wheel for journalctl to work
(In reply to comment #1)
> don't forget about adm which we need in addition to wheel for journalctl to
I don't see any references to adm in the source code at the moment, so this patch isn't regressing anything?
Also fwiw it's no longer "adm" apparently:
" * The journal files are now owned by a new group
"systemd-journal", which exists specifically to allow access
to the journal, and nothing else. Previously, we used the
"adm" group for that, which however possibly covers more
than just journal/log file access. "
yea no regressions. Feel free to push your patch.
Oh from your link even:
Note that "make install" will also set FS ACLs
up for /var/log/journal to give "adm" and "wheel" read
access to it
So that problem is fixed now anyway.