mirror of
https://github.com/drakkan/sftpgo.git
synced 2024-11-21 23:20:24 +00:00
7fc5cb80d6
so the service can bind to privileged ports without running as root user Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
42 lines
1.2 KiB
Bash
42 lines
1.2 KiB
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
if [ "$1" = "configure" ]; then
|
|
# Add user and group
|
|
if ! getent group sftpgo >/dev/null; then
|
|
groupadd --system sftpgo
|
|
fi
|
|
if ! getent passwd sftpgo >/dev/null; then
|
|
useradd --system \
|
|
--gid sftpgo \
|
|
--no-create-home \
|
|
--home-dir /var/lib/sftpgo \
|
|
--shell /usr/sbin/nologin \
|
|
--comment "SFTPGo user" \
|
|
sftpgo
|
|
fi
|
|
|
|
if [ -z "$2" ]; then
|
|
# if configure has no args this is the first installation
|
|
# for upgrades the second arg is the previously installed version
|
|
#
|
|
# initialize data provider
|
|
sftpgo initprovider -c /etc/sftpgo
|
|
# ensure files and folders have the appropriate permissions
|
|
chown -R sftpgo:sftpgo /etc/sftpgo /var/lib/sftpgo /srv/sftpgo
|
|
chmod 750 /etc/sftpgo /var/lib/sftpgo /srv/sftpgo
|
|
chmod 640 /etc/sftpgo/sftpgo.json
|
|
fi
|
|
|
|
# we added /srv/sftpgo after 1.1.0, we should check if we are upgrading
|
|
# from this version but a non-recursive chmod/chown shouldn't hurt
|
|
if [ -d /srv/sftpgo ]; then
|
|
chown sftpgo:sftpgo /srv/sftpgo
|
|
chmod 750 /srv/sftpgo
|
|
fi
|
|
|
|
# set the cap_net_bind_service capability so the service can bind to privileged ports
|
|
setcap cap_net_bind_service=+ep /usr/bin/sftpgo || true
|
|
fi
|
|
|
|
#DEBHELPER#
|