Re: Normal user can ask status of services

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Replying on google does not work as I am used to. It sends to the sender instead of the group. 😱

Op za 26 aug 2023 om 18:31 schreef Cecil Westerhof <cldwesterhof@xxxxxxxxx>:

Op za 26 aug 2023 om 17:35 schreef Dave Howorth <systemd@xxxxxxxxxxxxxx>:
On Sat, 26 Aug 2023 16:17:46 +0300
Andrei Borzenkov <arvidjaar@xxxxxxxxx> wrote:
> On 26.08.2023 15:46, Michael Biebl wrote:
> >
> > Reading system logs is a privileged operation.
>
> It is not about reading logs but about being able to "systemctl
> status some-system-unit"
>
> > You can grant this privilege to individual users by adding them to
> > the systemd-journal (or adm) group.
>
> The question was how to prevent normal users from seeing system unit
> status.

TBF, it wasn't really clear (to me at least) what the question was
about. Either what you surmised, or what Michael surmised or maybe
about which Debian releases have cron installed by default? I certainly
couldn't work it out.

I was not surprised that cron was installed. (I want to migrate cron to systemd timers.) I was surprised that I could ask the status of cron as a normal user. That seemed strange to me, I expected that only root would be able to do that.
But I use systemd, but certainly am no expert. But willing to learn more.

--
Cecil Westerhof


--
Cecil Westerhof

[Index of Archives]     [LARTC]     [Bugtraq]     [Yosemite Forum]     [Photo]

  Powered by Linux