From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-4.2 required=3.0 tests=ALL_TRUSTED,AWL,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 Received: from localhost (dcvr.yhbt.net [127.0.0.1]) by dcvr.yhbt.net (Postfix) with ESMTP id 5A43C1F452 for ; Sat, 28 Oct 2023 18:01:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=80x24.org; s=selector1; t=1698516073; bh=H2aSQWYyNTfExlyU/ZY9HCr9BNutcCssRQMxfSFhhec=; h=From:To:Subject:Date:In-Reply-To:References:From; b=gFP8+Y9JfC+S1MTjxbf5tI8wsCCWPM+UmXyXTg5u6oCz4ORofDoyvaYErIxlCFerM dZ/WNg75JZ/iSSQFiiANusX2zGg3FdTOBdru/4uHg60Ku/xxiHQ5YJKM5OfowZ8B4G 66OrHZiP++6rpI7GI0bJcPIfU4sB2em8I2/OdnRw= From: Eric Wong To: meta@public-inbox.org Subject: [PATCH 1/2] examples/*.service: avoid `nobody' user on systemd Date: Sat, 28 Oct 2023 18:01:12 +0000 Message-ID: <20231028180113.6922-2-e@80x24.org> In-Reply-To: <20231028180113.6922-1-e@80x24.org> References: <20231028180113.6922-1-e@80x24.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit List-Id: systemd complains about `User=nobody' since `nobody' has access to all files which can't be mapped to a valid UID. We'll also switch to `Group=ssl-cert' since that ought to be able to read TLS certificates. --- examples/public-inbox-httpd@.service | 4 ++-- examples/public-inbox-imapd@.service | 2 +- examples/public-inbox-nntpd@.service | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/examples/public-inbox-httpd@.service b/examples/public-inbox-httpd@.service index a56f6f81..11859198 100644 --- a/examples/public-inbox-httpd@.service +++ b/examples/public-inbox-httpd@.service @@ -32,8 +32,8 @@ NonBlocking = true Sockets = public-inbox-httpd.socket KillSignal = SIGQUIT -User = nobody -Group = nogroup +User = news +Group = ssl-cert ExecReload = /bin/kill -HUP $MAINPID TimeoutStopSec = 86400 KillMode = process diff --git a/examples/public-inbox-imapd@.service b/examples/public-inbox-imapd@.service index 8f5b79f2..80104605 100644 --- a/examples/public-inbox-imapd@.service +++ b/examples/public-inbox-imapd@.service @@ -32,7 +32,7 @@ NonBlocking = true Sockets = public-inbox-imapd.socket KillSignal = SIGQUIT -User = nobody +User = news Group = ssl-cert ExecReload = /bin/kill -HUP $MAINPID TimeoutStopSec = 86400 diff --git a/examples/public-inbox-nntpd@.service b/examples/public-inbox-nntpd@.service index 11bc223f..24f9ca73 100644 --- a/examples/public-inbox-nntpd@.service +++ b/examples/public-inbox-nntpd@.service @@ -32,7 +32,7 @@ NonBlocking = true Sockets = public-inbox-nntpd.socket KillSignal = SIGQUIT -User = nobody +User = news Group = ssl-cert ExecReload = /bin/kill -HUP $MAINPID TimeoutStopSec = 86400