On 2024-07-14 13:22:08 +0200, Chris Hofstaedtler wrote: > On Sat, Jul 13, 2024 at 11:33:01PM -0400, ov2k wrote: > > wtmpdb respects the system-wide umask when creating > > /var/lib/wtmpdb/wtmp.db. This is inappropriate when the system-wide > > umask is 077 or something similarly restrictive, as wtmp.db can no > > longer be read by others > > That however might be the intention of a local configuration. IOW > admins might want to set it up so that login records are not leaked > to non-root.
I agree. I've checked the status of a multi-user bookworm machine at my lab, and it has: -rw-rw---- 1 root utmp 384384 2024-09-19 09:52:09 /var/log/wtmp So an admin may want the same thing for wtmp.db. Isn't there an API to read information from this file, with specific handling of permissions, e.g. so that a user can get his own information? -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
