Once upon a time, Matthew Miller <mattdm(a)fedoraproject.org> said:
a. Use wheel group in addition to adm -- work with the way
Fedora/RHEL
currently do things
As others have pointed out, Fedora/RHEL don't currently set logs to
readable by anyone other than root.
However, I think it is a good idea to allow privileged non-root users to
read logs (I set my systems up with logs group-readable and owned by
wheel). However, IMHO this should be configurable, not hard-coded into
systemd (hard-coding things like this is almost always a bad idea).
It would be nice to allow some finer-grained controls (again, on some of
my systems, some logs are readable by different groups, sometimes more
than one via file ACLs).
--
Chris Adams <cmadams(a)hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.