]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
coredump,journal: do not do ACL magic for processes of dynamic UIDs
authorLennart Poettering <lennart@poettering.net>
Sat, 2 Dec 2017 12:02:44 +0000 (13:02 +0100)
committerLennart Poettering <lennart@poettering.net>
Wed, 6 Dec 2017 12:40:50 +0000 (13:40 +0100)
Dynamic UIDs should be treated like system users in this regard.

src/coredump/coredump.c
src/journal/journald-server.c

index eda7d78be210bd3aa119331ed9ef8fc0f49d8beb..cf56a8ad2673481870d79277d3b9b001b8d2b9c1 100644 (file)
@@ -165,7 +165,7 @@ static int fix_acl(int fd, uid_t uid) {
 
         assert(fd >= 0);
 
-        if (uid_is_system(uid))
+        if (uid_is_system(uid) || uid_is_dynamic(uid))
                 return 0;
 
         /* Make sure normal users can read (but not write or delete)
index cc45591c098d6ba9ffe54cf0a53487e75d862c16..06c64a46e2ee4745435353cb20ce57fc3f699583 100644 (file)
@@ -248,7 +248,7 @@ static void server_add_acls(JournalFile *f, uid_t uid) {
         assert(f);
 
 #if HAVE_ACL
-        if (uid_is_system(uid))
+        if (uid_is_system(uid) || uid_is_dynamic(uid))
                 return;
 
         r = add_acls_for_user(f->fd, uid);