summary refs log tree commit diff
path: root/nixos/modules/system/boot
diff options
context:
space:
mode:
authorAntoine Eiche <lewo@abesis.fr>2017-02-06 20:47:25 +0100
committerNikolay Amiantov <ab@fmap.me>2017-02-08 16:06:14 +0300
commit9d30099b7f6b7f5bef6abd6dc240ada3a666112c (patch)
tree76b905c8211b9f8962427fb87183f7154002a58d /nixos/modules/system/boot
parentd2465227d52de29cd7bb8a49feb0a1cb21a4bc11 (diff)
downloadnixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar.gz
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar.bz2
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar.lz
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar.xz
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.tar.zst
nixlib-9d30099b7f6b7f5bef6abd6dc240ada3a666112c.zip
nixos/systemd: set r-x group permissions on /var/log/journal
This allows services such as systemd-journal-gateway to access the
systemd journal.

Closes #22288
Diffstat (limited to 'nixos/modules/system/boot')
-rw-r--r--nixos/modules/system/boot/systemd.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/nixos/modules/system/boot/systemd.nix b/nixos/modules/system/boot/systemd.nix
index 0ed3c083f7c4..56e21e824395 100644
--- a/nixos/modules/system/boot/systemd.nix
+++ b/nixos/modules/system/boot/systemd.nix
@@ -753,7 +753,8 @@ in
 
         # Keep a persistent journal. Note that systemd-tmpfiles will
         # set proper ownership/permissions.
-        mkdir -m 0700 -p /var/log/journal
+        # FIXME: revert to 0700 with systemd v233.
+        mkdir -m 0750 -p /var/log/journal
       '';
 
     users.extraUsers.systemd-network.uid = config.ids.uids.systemd-network;