From 9c844b6008db4c790e1f4c904501fc94853799d9 Mon Sep 17 00:00:00 2001 From: Sören Tempel Date: Thu, 23 Apr 2026 20:59:24 +0200 Subject: services: go-webdav: Don't run service as root. Instead, run it as the created go-webdav user. Since go-webdav doesn't drop privileges by itself this requires explicitly passing the users and group via make-forkexec-constructor, which was overlooked here. Without this patch, the account created by go-webdav-account-service is just not used at all, which is not what was intended here. * gnu/services/web.scm (go-webdav-shepherd-service): Pass #:user as well as #:group to make-forkexec-constructor. Change-Id: Ib48aa7884aca84c488133a035a76a7edfaaf0aab Signed-off-by: Liliana Marie Prikler --- gnu/services/web.scm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gnu/services/web.scm b/gnu/services/web.scm index 6f314acad6..9acf9b0f5b 100644 --- a/gnu/services/web.scm +++ b/gnu/services/web.scm @@ -1861,7 +1861,8 @@ Whoogle.")) (requirement '(user-processes networking)) (start #~(make-forkexec-constructor (list (string-append #$go-webdav "/bin/webdav-server") - #$@args))) + #$@args) + #:user "go-webdav" #:group "go-webdav")) (stop #~(make-kill-destructor))))) (define go-webdav-account-service -- cgit v1.3