tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libnss-myhostname-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libnss-mymachines-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libnss-resolve",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libnss-resolve-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libpam-systemd",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libpam-systemd-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libsystemd-dev-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libsystemd0",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libsystemd0-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev-dev",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev-dev-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev1",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev1-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev1-udeb",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "libudev1-udeb-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-container",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-container-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-coredump",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-coredump-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-dbg",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-journal-remote-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-sysv",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "systemd-sysv-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "udev",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "udev-dbgsym",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "udev-udeb",
"binary_version": "229-4ubuntu1"
},
{
"binary_name": "udev-udeb-dbgsym",
"binary_version": "229-4ubuntu1"
}
],
"availability": "No subscription required"
}