Run everything as a new unprivileged system user

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/crontab/pakfire-build-service b/src/crontab/pakfire-build-service
index ce8c484f4419453affa61e78ee526b2281378ce8..ba2347cebce0e80e61aedb5c939097bb1eb0dcf0 100644 (file)
--- a/src/crontab/pakfire-build-service
+++ b/src/crontab/pakfire-build-service
@@ -1,20 +1,20 @@
 # Send queued emails once a minute
-#* * * * *     pakfire pakfire-build-service process-message-queue &>/dev/null
+#* * * * *             _pakfire        pakfire-build-service process-message-queue &>/dev/null
 
 # Synchronize repositories once every five minutes
-*/5 * * * *    pakfire pakfire-build-service repo:sync
+*/5 * * * *            _pakfire        pakfire-build-service repo:sync
 
 # Cleanup
-*/5 * * * *    pakfire pakfire-build-service cleanup
+*/5 * * * *            _pakfire        pakfire-build-service cleanup
 
 # Pull sources
-#*/5 * * * *   pakfire pakfire-build-service pull-sources &>/dev/null
+#*/5 * * * *   _pakfire        pakfire-build-service pull-sources &>/dev/null
 
 # Dist
-#*/5 * * * *   pakfire pakfire-build-service dist &>/dev/null
+#*/5 * * * *   _pakfire        pakfire-build-service dist &>/dev/null
 
 # Send updates to Bugzilla
-#*/5 * * * *   pakfire pakfire-build-service send-bug-updates &>/dev/null
+#*/5 * * * *   _pakfire        pakfire-build-service send-bug-updates &>/dev/null
 
 # Run mirror check
-#*/30 * * * *  pakfire pakfire-build-service check-mirrors &>/dev/null
+#*/30 * * * *  _pakfire        pakfire-build-service check-mirrors &>/dev/null

diff --git a/src/systemd/pakfire-hub.service.in b/src/systemd/pakfire-hub.service.in
index 34313c2fddfd5cb0ed423529296584274e9fa0bb..f8bf5e13b6c84b96a53affcdd3f887e96c5bc414 100644 (file)
--- a/src/systemd/pakfire-hub.service.in
+++ b/src/systemd/pakfire-hub.service.in
@@ -4,7 +4,7 @@ After=network.target
 
 [Service]
 ExecStart=@bindir@/pakfire-hub --port=8001
-User=pakfire
+User=_pakfire
 
 [Install]
 WantedBy=multi-user.target

diff --git a/src/systemd/pakfire-web.service.in b/src/systemd/pakfire-web.service.in
index 1ac4d60aaa324b60360cbb460ab803a53534fd0f..2aeb57e946e5fa171fad87f331735d9684ce5113 100644 (file)
--- a/src/systemd/pakfire-web.service.in
+++ b/src/systemd/pakfire-web.service.in
@@ -4,8 +4,7 @@ After=network.target
 
 [Service]
 ExecStart=@bindir@/pakfire-web --port=9001
-User=nobody
-Group=nogroup
+User=_pakfire
 
 [Install]
 WantedBy=multi-user.target