[Git][debian-gis-team/libapache2-mod-tile][master] Run renderd as user _renderd.

[Felix Delattre]

Felix Delattre pushed to branch master at Debian GIS Project / libapache2-mod-tile


Commits:
fa657cd3 by Felix Delattre at 2020-08-26T23:18:16+00:00
Run renderd as user _renderd.

- - - - -


4 changed files:

- debian/renderd.init
- debian/renderd.postinst
- + debian/renderd.postrm
- debian/renderd.service


Changes:

=====================================
debian/renderd.init
=====================================
@@ -21,7 +21,7 @@ DAEMON_ARGS=""
 PIDSOCKDIR=/var/run/$NAME
 PIDFILE=$PIDSOCKDIR/$NAME.pid
 SCRIPTNAME=/etc/init.d/$NAME
-RUNASUSER=www-data
+RUNASUSER=_renderd
 
 # Exit if the package is not installed
 [ -x "$DAEMON" ] || exit 0


=====================================
debian/renderd.postinst
=====================================
@@ -1,7 +1,28 @@
 #!/bin/sh
+
 set -e
 
-chown www-data:www-data -R /var/lib/mod_tile
+case "$1" in
+    configure)
+	if ! getent group _renderd > /dev/null; then
+	    addgroup --force-badname --quiet --system _renderd
+	fi
+
+	if ! getent passwd _renderd > /dev/null; then
+	    adduser --force-badname --gecos "renderd daemon" \
+		    --home /nonexistent --ingroup _renderd \
+		    --no-create-home --quiet --system _renderd
+	fi
+	;;
+    abort-upgrade|abort-remove|abort-deconfigure)
+	;;
+    *)
+	echo "postinst called with unknown argument \`$1'" >&2
+	exit 1
+	;;
+esac
+
+chown _renderd:_renderd -R /var/lib/renderd
 
 # automatically install munin plugins if munin is present.
 if [ -d /etc/munin/plugins ]


=====================================
debian/renderd.postrm
=====================================
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
+
+if [ "$1" = "purge" ] ; then
+    deluser --quiet --system _renderd > /dev/null || true
+    delgroup --quiet --system _renderd > /dev/null || true
+fi


=====================================
debian/renderd.service
=====================================
@@ -4,7 +4,7 @@ After=network.target auditd.service
 
 [Service]
 ExecStart=/usr/bin/renderd -f
-User=www-data
+User=_renderd
 
 [Install]
 WantedBy=multi-user.target



View it on GitLab: https://salsa.debian.org/debian-gis-team/libapache2-mod-tile/-/commit/fa657cd3a6281f60e4cfe2872adf28e1225233d7

-- 
View it on GitLab: https://salsa.debian.org/debian-gis-team/libapache2-mod-tile/-/commit/fa657cd3a6281f60e4cfe2872adf28e1225233d7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20200826/5ffe73f2/attachment-0001.html>