[Bug 1687015] Re: 229_4ubuntu17 removes group write permissions from /var/log

[Simon Davy]

The explicit /bin/systemd-tmpfiles is invoked in the postinst script for
systemd.

Interestingly, it's identical to systemd 229_4ubuntu16 postinst script,
so it was not introduced in 4ubuntu17.

I suspect this issue has been present for a while, but the daily run of
systemd-tmpfiles-clean job restores it.

If so, this is probably a debhelper bug? As it, it should respect the
machine's tmpfiles.d config rather than exclude it?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1687015

Title:
  229_4ubuntu17 removes group write permissions from /var/log

Status in systemd package in Ubuntu:
  Incomplete

Bug description:
  Steps to reproduce (time senstive, once lxd image is updated with
  4ubuntu17, I expect this won't work)

  lxc launch ubuntu:x test
  lxc exec test -- ls -ld /var/log  # shows 775 perms
  lxc exec test -- apt update
  lxc exec test -- apt-cache policy systemd
  lxc exec test -- apt install systemd
  lxc exec test -- ls -ld /var/log  # shows 755 permissions

  straceing the apt install shows no chmod calls to /var/log (only
  /var/log/apt.log, as you'd expect)

  This means syslog cannot write new files in /var/log, and had broken
  some production logging for us as a result.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1687015/+subscriptions