0ct0pu5/wesnoth
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "systemd: drop _ prefix from username"

Browse source 
Prefixing all system and group names with the underscore is
recommended by the systemd developers.

This reverts commit d6d2a4f996.
This commit is contained in:
Steve Cotton 2024-01-21 01:34:18 +01:00
parent b3ec3f4d0b
commit 91bd96b319
5 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
changelog_entries/systemd_nobody.md
View file

@ -1,2 +1,2 @@
### Security Fixes
* Run wesnothd server as `wesnoth:wesnoth` instead of `nobody:users`, improving safety and fixing a warning message in systemd 246+
* Run wesnothd server as `_wesnoth:_wesnoth` instead of `nobody:users`, improving safety and fixing a warning message in systemd 246+

3
packaging/systemd/wesnothd.service.in
View file

@ -23,7 +23,8 @@ ExecStopPost=/bin/rm -f @FIFO_DIR@/socket
SyslogIdentifier=Wesnothd@BINARY_SUFFIX@
WorkingDirectory=@FIFO_DIR@
User=wesnoth
User=_wesnoth
Group=_wesnoth
# Additional security-related features
# (when using the -c option, do not use ProtectHome)

3
packaging/systemd/wesnothd.service.scons.in
View file

@ -4,7 +4,8 @@ After=network.target
[Service]
ExecStart=%bindir/wesnothd
User=wesnoth
User=_wesnoth
Group=_wesnoth
[Install]
WantedBy=multi-user.target

3
packaging/systemd/wesnothd.sysusers.conf.in
View file

@ -1 +1,2 @@
u wesnoth - "Wesnoth multiplayer server"
u _wesnoth -
g _wesnoth -

2
packaging/systemd/wesnothd.tmpfiles.conf.in
View file

@ -1 +1 @@
d @FIFO_DIR@ 0700 wesnoth wesnoth -
d @FIFO_DIR@ 0700 _wesnoth _wesnoth -