X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=README;h=948bb650ad14a5256354e5316a132052f8484f0d;hp=300a4cf8bc177770511e3c5170382eb6dd51f9e6;hb=7fdf51751c752e8074e2d8e429d40db91ce87b95;hpb=a24c64f03f9c5c0304451d8542fee853187a5168 diff --git a/README b/README index 300a4cf8b..948bb650a 100644 --- a/README +++ b/README @@ -101,8 +101,15 @@ REQUIREMENTS: pass the same DESTDIR to 'make sphinx-html' invocation. USERS AND GROUPS: + Default udev rules use the following standard system group + names, which need to be resolvable by getgrnam() at any time, + even in the very early boot stages, where no other databases + and network are available: + + tty, dialout, kmem, video, audio, lp, floppy, cdrom, tape, disk + During runtime the journal daemon requires the - "system-journal" system group to exist. New journal files will + "systemd-journal" system group to exist. New journal files will be readable by this group (but not writable) which may be used to grant specific users read access. @@ -113,6 +120,11 @@ USERS AND GROUPS: # setfacl -nm g:wheel:rx,d:g:wheel:rx,g:adm:rx,d:g:adm:rx /var/log/journal/ + The journal gateway daemon requires the + "systemd-journal-gateway" system user and group to + exist. During execution this network facing service will drop + privileges and assume this uid/gid for security reasons. + WARNINGS: systemd will warn you during boot if /etc/mtab is not a symlink to /proc/mounts. Please ensure that /etc/mtab is a