privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/idm: allow infra admins to read systemd journal

Browse source
This commit is contained in:
Max Headroom 2023-06-12 23:44:46 +02:00
parent 9ec0faeea2
commit a49766e75a
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cluster/services/idm/default.nix
View file

@ -25,6 +25,8 @@
server = ./server.nix;
client = [
./client.nix
./modules/idm-nss-ready.nix
./modules/idm-tmpfiles.nix
./policies/infra-admins.nix
];
client-soda = [

6
cluster/services/idm/policies/infra-admins.nix
View file

@ -14,4 +14,10 @@
options = [ "SETENV" ];
};
};
idm.tmpfiles.rules = [
"a+ /run/log/journal/%m - - - - d:group:infra_admins:r-x"
"a+ /run/log/journal/%m - - - - group:infra_admins:r-x"
"a+ /run/log/journal/%m/*.journal* - - - - d:group:infra_admins:r--"
];
}