Nick Rosbrook
f195b1c1a8
In Ubuntu, rsyslog is (a) part of the minimal image and (b) does not run as root. To facilitate this, the rsyslog package configures /var/log to be writeable by the syslog group. There are currently conflicts in the Ubuntu packaging due to the way tmpfiles are handled in package scripts: when systemd-tmpfiles is invoked with both configurations (or for all configurations), things work fine. But if invoked with only var.conf, which is the default case for package upgrades, rsyslog is broken. One suggestion to approach this was to make rsyslog's tmpfile configuration use ACLs instead of trying to change the owning group and directory mode. This can work, but since the ACL mask is stored in the group permission bits, the effective mask for rsyslog becomes r-x again when var.conf is invoked, because it sees that 0775 != 0755, and chmods the directory. Hence, for /var/log write permisssions to be extendable with ACLs, the mode must be at least 0775. Rather than change the default, add a build option to configure the /var/log mode.
System and Service Manager
Details
Most documentation is available on systemd's website.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS, and also repositories with packages built from the latest stable release