Hi, Diego Nicola Barbato skribis: > On Guix System the log files (in /var/log) generated by syslogd are > currently (commit 151f3d4) world readable. They should probably only be > readable by root (for the same reason that dmesg can only be run by > root). > > It isn't possible to set the umask with fork-exec-constructor, is it? > Otherwise that might have been a simple solution. That would be a nice solution to implement in the Shepherd. If you feel like giving it a try, that would be great! In the meantime, the patch below fixes the syslogd problem. Also attached is a patch for the accounting database, though that one is questionable. Thoughts? Thanks, Ludo’.