Re: set permission/ownership for files generated by service

[Efraim Flashner <efraim@flashner.co.il>]

[-- Attachment #1: Type: text/plain, Size: 1759 bytes --]

On Tue, Jul 14, 2020 at 04:46:31PM +0430, Reza Alizadeh Majd wrote:
> 
> I assume that I find the issue source: 
> 
> > > > >
> > > > >--8<---------------cut here---------------start------------->8---
> > > > >
> > > > >(define %kyc-accounts
> > > > >  (list (user-group (name "kyc-service"))
> > > > >        (user-group (name "kyc-rpc"))
> > > > >        (user-account
> > > > >          (name "kyc-service")
> > > > >          (group "kyc-service")
> > > > >          (system? #f)
> > > > >          (supplementary-groups '("wheel" "kyc-rpc" "video"))
> > > > >          (comment "KYC service user"))))
> > > > >
> > > > >--8<---------------cut here---------------end--------------->8---
> > > > >
> 
> I modified the service definition to open an empty 'screen', so I can
> access shell through service, when I connect to the screen and check
> user groups, it seems that the 'supplementary-groups' didn't apply to
> the user:
> 
> --8<---------------cut here---------------start------------->8---
> sh-5.0$ whoami 
> kyc-service
> sh-5.0$ groups
> kyc-service
> sh-5.0$ 
> --8<---------------cut here---------------end--------------->8---
> 
> so, is there any thing that I missed?
> 

The only other thing I can think of right now is that you're creating
the kyc-service and kyc-rpc groups AND also using them for the first
time here. It could be that the kyc-service group is created with the
kyc-service user and the kyc-rpc group is 'too slow'. Try your code
again but without the kyc-rpc group.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]