[Bug 1687015] [NEW] 229_4ubuntu17 removes group write permissions from /var/log

[Simon Davy]

Public bug reported:

Steps to reproduce (time senstive, once lxd image is updated with
4ubuntu17, I expect this won't work)

lxc launch ubuntu:x test
lxc exec test -- ls -ld /var/log  # shows 775 perms
lxc exec test -- apt update
lxc exec test -- apt-cache policy systemd
lxc exec test -- apt install systemd
lxc exec test -- ls -ld /var/log  # shows 755 permissions

straceing the apt install shows no chmod calls to /var/log (only
/var/log/apt.log, as you'd expect)

This means syslog cannot write new files in /var/log, and had broken
some production logging for us as a result.

** Affects: systemd (Ubuntu)
     Importance: Undecided
         Status: New

** Description changed:

- Steps to reproduce:
+ Steps to reproduce (time senstive, once lxd image is updated with
+ 4ubuntu17, I expect this won't work)
  
  lxc launch ubuntu:x test
  lxc exec test -- ls -ld /var/log  # shows 775 perms
  lxc exec test -- apt update
  lxc exec test -- apt-cache policy systemd
  lxc exec test -- apt install systemd
  lxc exec test -- ls -ld /var/log  # shows 755 permissions
  
  straceing the apt install shows no chmod calls to /var/log (only
  /var/log/apt.log, as you'd expect)
  
  This means syslog cannot write new files in /var/log, and had broken
  some production logging for us as a result.

** Summary changed:

- 229_4ubuntu17 remove group write permissions from /var/log
+ 229_4ubuntu17 removes group write permissions from /var/log

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1687015

Title:
  229_4ubuntu17 removes group write permissions from /var/log

Status in systemd package in Ubuntu:
  New

Bug description:
  Steps to reproduce (time senstive, once lxd image is updated with
  4ubuntu17, I expect this won't work)

  lxc launch ubuntu:x test
  lxc exec test -- ls -ld /var/log  # shows 775 perms
  lxc exec test -- apt update
  lxc exec test -- apt-cache policy systemd
  lxc exec test -- apt install systemd
  lxc exec test -- ls -ld /var/log  # shows 755 permissions

  straceing the apt install shows no chmod calls to /var/log (only
  /var/log/apt.log, as you'd expect)

  This means syslog cannot write new files in /var/log, and had broken
  some production logging for us as a result.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1687015/+subscriptions