Bug 1411199
| Summary: | systemd-tmpfiles will not update existing journal files | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Alois Mahdal <amahdal> | ||||
| Component: | systemd | Assignee: | Jan Synacek <jsynacek> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Frantisek Sumsal <fsumsal> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 7.3 | CC: | bblaskov, fsumsal, jsynacek, msekleta, nhosoi, pportant, systemd-maint-list | ||||
| Target Milestone: | rc | Keywords: | Patch | ||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | systemd-219-40.el7 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2017-08-01 09:14:52 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 1383699 | ||||||
| Attachments: |
|
||||||
Note that alternative way to test this is to remove workaround from:
/CoreOS/systemd/Sanity/journalctl-permissions
and re-run it against new build.
Created attachment 1260800 [details]
patch
Since the patched file is not in the repo, I cannot submit a PR for this.
Meanwhile, the file has gotten into the repo, I can file a proper PR now. https://github.com/lnykryn/systemd-rhel/pull/120 (In reply to Jan Synacek from comment #4) > Meanwhile, the file has gotten into the repo, I can file a proper PR now. I mean, I can now properly patch the .m4 file that generates the tmpfiles snippet... *** Bug 1446991 has been marked as a duplicate of this bug. *** fix merged to upstream staging branch -> https://github.com/lnykryn/systemd-rhel/commit/d38e703a133487218c91f1e76072fc6b35c0978c https://github.com/lnykryn/systemd-rhel/commit/2b089fee5954986c932845887ed2cfd889bd4410 https://github.com/lnykryn/systemd-rhel/commit/2a1f91ffc371f2bc3767a806ff387517ff9b9fc8 -> post Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2297 |
Description of problem ====================== systemd-tmpfiles will not set up persistent journal storage properly. If storage already contains files, their ACL/ownership will not be changed. Version-Release number of selected component ============================================ systemd-219-30.el7 How reproducible ================ Always Steps to Reproduce ================== 1. rm -rf /var/log/journal 2. systemctl restart systemd-journald.service This already generates /var/log/journal/<ID>/system.journal 3. systemd-tmpfiles --create --prefix /var/log/journal 4. observe system.journal Actual results ============== Group is root. Expected results ================ Group should be systemd-journal, i.e. member of this group should be able to read this file. Additional info =============== This does not appear in case of volatile storage; in that case /run/log seems to be updated correctly. Also it does not happen on Fedora 24, so this could have already been fixed (intentionally or not). Following is diff of /usr/lib/tmpfiles.d/systemd.conf from RHEL7 and Fedora 24 (229-16.fc24): --- systemd-rhel7.conf 2017-01-09 05:25:23.640695553 +0100 +++ systemd.conf 2017-01-09 05:25:00.682352824 +0100 @@ -30,9 +30,13 @@ z /var/log/journal 2755 root systemd-journal - - z /var/log/journal/%m 2755 root systemd-journal - - +z /var/log/journal/%m/system.journal 0640 root systemd-journal - - +a+ /var/log/journal - - - - d:group:adm:r-x,d:group:wheel:r-x +a+ /var/log/journal - - - - group:adm:r-x,group:wheel:r-x a+ /var/log/journal/%m - - - - d:group:adm:r-x,d:group:wheel:r-x -A+ /var/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x +a+ /var/log/journal/%m - - - - group:adm:r-x,group:wheel:r-x +a+ /var/log/journal/%m/system.journal - - - - group:adm:r--,group:wheel:r-- d /var/lib/systemd 0755 root root - d /var/lib/systemd/coredump 0755 root root 3d