diff options
| author | Sören Tempel <soeren+git@soeren-tempel.net> | 2026-04-23 20:59:24 +0200 |
|---|---|---|
| committer | Liliana Marie Prikler <liliana.prikler@gmail.com> | 2026-05-01 07:46:47 +0200 |
| commit | 9c844b6008db4c790e1f4c904501fc94853799d9 (patch) | |
| tree | e889b25d9ba7c1b590beb556164d9dd41e01520a /gnu | |
| parent | bdd1a6655d1984538d13722ec352dd978af8384e (diff) | |
services: go-webdav: Don't run service as root.
Instead, run it as the created go-webdav user. Since go-webdav doesn't
drop privileges by itself this requires explicitly passing the users and
group via make-forkexec-constructor, which was overlooked here.
Without this patch, the account created by go-webdav-account-service
is just not used at all, which is not what was intended here.
* gnu/services/web.scm (go-webdav-shepherd-service): Pass #:user as well
as #:group to make-forkexec-constructor.
Change-Id: Ib48aa7884aca84c488133a035a76a7edfaaf0aab
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
Diffstat (limited to 'gnu')
| -rw-r--r-- | gnu/services/web.scm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/gnu/services/web.scm b/gnu/services/web.scm index 6f314acad6..9acf9b0f5b 100644 --- a/gnu/services/web.scm +++ b/gnu/services/web.scm @@ -1861,7 +1861,8 @@ Whoogle.")) (requirement '(user-processes networking)) (start #~(make-forkexec-constructor (list (string-append #$go-webdav "/bin/webdav-server") - #$@args))) + #$@args) + #:user "go-webdav" #:group "go-webdav")) (stop #~(make-kill-destructor))))) (define go-webdav-account-service |