Re: strange journald *.journal file permissions

[Christian Seiler <christian@iwakd.de>]

Am 2015-07-05 13:03, schrieb Vincent Lefevre:
> Can anyone explain these strange journald permissions?
>
> -rw-r-x---+ 1 root root            16777216 2015-07-05 12:57:55
> system.journal*
> -rw-r-x---+ 1 root systemd-journal  8388608 2015-07-05 12:17:21
> user-1000.journal*
>
> More precisely, why the bit x for the group?

So when activating the persistent journal, README.Debian contains
the following line:
setfacl -R -nm g:adm:rx,d:g:adm:rx /var/log/journal

Did you by any chance forget the -n when executing it, so that
instead you executed
setfacl -R -m g:adm:rx,d:g:adm:rx /var/log/journal
?

That would explain the x bit (if the journal files were already
there when the setfacl command was executed.)

If so: that's harmless, just remove it, either via

chmod g=r /var/log/journal/*.journal

or

setfacl -m m::r /var/log/journal/*.journal

(Both are equivalent, because if POSIX ACLs are present, the
group permissions bit is used as the effective rights mask, see
the documentation for POSIX ACLs.)

Christian