From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Wed, 29 May 2024 12:03:08 +0000 (+0200)
Subject: Relax permissions on systemd-journal-remote configuration
X-Git-Tag: v23.1~38^2
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F2730%2Fhead;p=thirdparty%2Fmkosi.git

Relax permissions on systemd-journal-remote configuration

Let's make sure the systemd-journal-remote process we start can always
read the configuration, even if it's running as a less privileged user.
---

diff --git a/mkosi/qemu.py b/mkosi/qemu.py
index 62a5ff549..333ead55c 100644
--- a/mkosi/qemu.py
+++ b/mkosi/qemu.py
@@ -450,6 +450,8 @@ def start_journal_remote(config: Config, sockfd: int) -> Iterator[None]:
         INVOKING_USER.chown(d)
 
     with tempfile.NamedTemporaryFile(mode="w", prefix="mkosi-journal-remote-config-") as f:
+        os.chmod(f.name, 0o644)
+
         # Make sure we capture all the logs by bumping the limits. We set MaxFileSize=4G because with the compact mode
         # enabled the files cannot grow any larger anyway.
         f.write(