coredump,journal: do not do ACL magic for processes of dynamic UIDs
authorLennart Poettering <lennart@poettering.net>
Sat, 2 Dec 2017 12:02:44 +0000 (13:02 +0100)
committerLennart Poettering <lennart@poettering.net>
Wed, 6 Dec 2017 12:40:50 +0000 (13:40 +0100)
Dynamic UIDs should be treated like system users in this regard.

src/coredump/coredump.c
src/journal/journald-server.c

index eda7d78..cf56a8a 100644 (file)
@@ -165,7 +165,7 @@ static int fix_acl(int fd, uid_t uid) {
 
         assert(fd >= 0);
 
-        if (uid_is_system(uid))
+        if (uid_is_system(uid) || uid_is_dynamic(uid))
                 return 0;
 
         /* Make sure normal users can read (but not write or delete)
index cc45591..06c64a4 100644 (file)
@@ -248,7 +248,7 @@ static void server_add_acls(JournalFile *f, uid_t uid) {
         assert(f);
 
 #if HAVE_ACL
-        if (uid_is_system(uid))
+        if (uid_is_system(uid) || uid_is_dynamic(uid))
                 return;
 
         r = add_acls_for_user(f->fd, uid);