[Bug 2067910] Re: gatewayd service listens on all interfaces by default

[Seth Arnold]

** Information type changed from Private Security to Public Security

** Changed in: systemd (Ubuntu)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2067910

Title:
  gatewayd service listens on all interfaces by default

Status in systemd package in Ubuntu:
  Won't Fix

Bug description:
  I installed this by adding the "systemd-journal-remote" package. Once
  installed, I can connect from any host on port 19531. It seems to me
  that this kind of service should not be open by default on an Ubuntu
  system.

  It looks like the default configuration for the socket, at
  /etc/systemd/system/systemd-journal-gatewayd.socket, has the
  following:

  [Socket]
  ListenStream = 19531

  For my purposes, I edited this using systemctl edit --full and changed
  it to the following:

  [Socket]
  ListenStream = [::1]:19531

  $ lsb_release -rd
  Description:    Ubuntu 22.04.4 LTS
  Release:        22.04
  $ apt-cache policy systemd-journal-remote
  systemd-journal-remote:
    Installed: 249.11-0ubuntu3.12
    Candidate: 249.11-0ubuntu3.12
    Version table:
   *** 249.11-0ubuntu3.12 500
          500 http://mirror.hetzner.com/ubuntu/packages jammy-updates/universe amd64 Packages
          500 http://de.archive.ubuntu.com/ubuntu jammy-updates/universe amd64 Packages
          100 /var/lib/dpkg/status
       249.11-0ubuntu3.7 500
          500 http://mirror.hetzner.com/ubuntu/packages jammy-security/universe amd64 Packages
          500 http://security.ubuntu.com/ubuntu jammy-security/universe amd64 Packages
       249.11-0ubuntu3 500
          500 http://mirror.hetzner.com/ubuntu/packages jammy/universe amd64 Packages
          500 http://de.archive.ubuntu.com/ubuntu jammy/universe amd64 Packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2067910/+subscriptions