services: syslog: Create log files as non-world-readable.
authorLudovic Courtès <ludo@gnu.org>
Mon, 6 Apr 2020 21:50:27 +0000 (23:50 +0200)
committerLudovic Courtès <ludo@gnu.org>
Mon, 6 Apr 2020 21:56:24 +0000 (23:56 +0200)
commitd7113bb655ff80a868a9e624c913f9d23e6c63ad
tree1c1f31c9cdbd52650ad5b4e7dab67f0355c2ad28
parent42a87136f0c99c0f1956e053d92f23bf096bddb6
services: syslog: Create log files as non-world-readable.

Partly fixes <https://bugs.gnu.org/40405>.
Reported by Diego Nicola Barbato <dnbarbato@posteo.de>.

* gnu/services/base.scm (syslog-service-type): Change 'start' method to
set umask to #o137 before spawning syslogd.
* gnu/tests/base.scm (run-basic-test)["/var/log/messages is not
world-readable"]: New test.
gnu/services/base.scm
gnu/tests/base.scm