From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id GHBzNgmnDV/1fAAA0tVLHw (envelope-from ) for ; Tue, 14 Jul 2020 12:37:29 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id mNwwMgmnDV8uLAAAbx9fmQ (envelope-from ) for ; Tue, 14 Jul 2020 12:37:29 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 331489403D6 for ; Tue, 14 Jul 2020 12:37:29 +0000 (UTC) Received: from localhost ([::1]:54586 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jvKBa-0006l3-CQ for larch@yhetil.org; Tue, 14 Jul 2020 08:37:26 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42518) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jvKBR-0006jP-Vg for help-guix@gnu.org; Tue, 14 Jul 2020 08:37:17 -0400 Received: from flashner.co.il ([178.62.234.194]:57844) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jvKBQ-0001Dc-8S for help-guix@gnu.org; Tue, 14 Jul 2020 08:37:17 -0400 Received: from localhost (unknown [141.226.9.208]) by flashner.co.il (Postfix) with ESMTPSA id 4849E40041; Tue, 14 Jul 2020 12:37:14 +0000 (UTC) Date: Tue, 14 Jul 2020 15:36:41 +0300 From: Efraim Flashner To: Reza Alizadeh Majd Subject: Re: set permission/ownership for files generated by service Message-ID: <20200714123641.GH10256@E5400> References: <20200714044809.5ffc4553@panther-arch.localdomain> <058F2A5B-1B2D-449E-9556-7D19625C8D8C@lepiller.eu> <20200714125456.314ac748@panther-arch.localdomain> <20200714091029.GG10256@E5400> <20200714164631.75765b5a@panther-arch.localdomain> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="CNfT9TXqV7nd4cfk" Content-Disposition: inline In-Reply-To: <20200714164631.75765b5a@panther-arch.localdomain> X-PGP-Key-ID: 0x41AAE7DCCA3D8351 X-PGP-Key: https://flashner.co.il/~efraim/efraim_flashner.asc X-PGP-Fingerprint: A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Received-SPF: pass client-ip=178.62.234.194; envelope-from=efraim@flashner.co.il; helo=flashner.co.il X-detected-operating-system: by eggs.gnu.org: First seen = 2020/07/14 08:37:14 X-ACL-Warn: Detected OS = ??? X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: 0.69 X-TUID: 2AuBuzqzZ+ta --CNfT9TXqV7nd4cfk Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 14, 2020 at 04:46:31PM +0430, Reza Alizadeh Majd wrote: >=20 > I assume that I find the issue source:=20 >=20 > > > > > > > > > >--8<---------------cut here---------------start------------->8--- > > > > > > > > > >(define %kyc-accounts > > > > > (list (user-group (name "kyc-service")) > > > > > (user-group (name "kyc-rpc")) > > > > > (user-account > > > > > (name "kyc-service") > > > > > (group "kyc-service") > > > > > (system? #f) > > > > > (supplementary-groups '("wheel" "kyc-rpc" "video")) > > > > > (comment "KYC service user")))) > > > > > > > > > >--8<---------------cut here---------------end--------------->8--- > > > > > >=20 > I modified the service definition to open an empty 'screen', so I can > access shell through service, when I connect to the screen and check > user groups, it seems that the 'supplementary-groups' didn't apply to > the user: >=20 > --8<---------------cut here---------------start------------->8--- > sh-5.0$ whoami=20 > kyc-service > sh-5.0$ groups > kyc-service > sh-5.0$=20 > --8<---------------cut here---------------end--------------->8--- >=20 > so, is there any thing that I missed? >=20 The only other thing I can think of right now is that you're creating the kyc-service and kyc-rpc groups AND also using them for the first time here. It could be that the kyc-service group is created with the kyc-service user and the kyc-rpc group is 'too slow'. Try your code again but without the kyc-rpc group. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --CNfT9TXqV7nd4cfk Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAl8NptYACgkQQarn3Mo9 g1FezA/+IpjLvAeFMRyr6hZiPEdGox6cfmk8B7yiPibNclJvHmo1M4kvL5ekxIqo R4l0codqZDW9gRJ6v+w1xZkBRybozm6ZHXXN83IsvKXs/5VAbnoZA71tW+5O4NpQ GEw4TqHwzLdSOeCIS1ryGOLmAvTFzP0f6b2cixpT5dDtYCjCZt2y3InegpQOE2Rj K4fBKTUt2zb/TP8MBu2cxiHmucCFiNctoYyHHbHCKtvrG+1V4bGo/xWwE4issMR2 nkojefU7axylAGK+vRVqL8Rk0QBhw/R4anvzhKLIUb7aFdum4/jpvKub/ym+hyrx ETJCYQ5gmFRZUQ1PM2kBJpe4aS0SZoexplAoGcmJZDs2KkV7etUVlS5cyfK6k05I wOs80wjSy47prc0jUUbS+jNS9vjETbhqksfKrnOCntXcKun4F76ty/rueu6VpDXQ 9ZLipq3vfmEvuZERVTy91RVY+9MaBMPRaUvuzsyKHZjimXqi1V4DLlc9B5vDT9sF +Ojt9h2IJ5keP9S3iawDNGK5amBTzVvTsVbo7+g3IKLs1xCknefj5vzVdErz6I+g WJYil5Au8n2rASMjmcocfhvIYzlWk6EiiNSgn4BagQa3JE124ppMlRwaDrf/NOIr rhRqleosytJTpu3dlde9dB/rDQvx+HBT1ghMH2u+xRRBW7NcUhI= =076T -----END PGP SIGNATURE----- --CNfT9TXqV7nd4cfk--