From ea11f1cea0de72d64b186dcf7a679848b833438df8337f1cbe1d8010f736bed9 Mon Sep 17 00:00:00 2001 From: Marcus Rueckert Date: Tue, 17 Oct 2017 14:48:54 +0000 Subject: [PATCH] Accepting request 534491 from home:dmolkentin:branches:security:dehydrated - Commands in service files need some escaping after all. Fix ExecStartPost. OBS-URL: https://build.opensuse.org/request/show/534491 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=16 --- dehydrated.changes | 5 +++++ dehydrated.service.in | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/dehydrated.changes b/dehydrated.changes index aca8222..4419682 100644 --- a/dehydrated.changes +++ b/dehydrated.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Oct 17 14:46:16 UTC 2017 - daniel.molkentin@suse.com + +- Commands in service files need some escaping after all. Fix ExecStartPost. + ------------------------------------------------------------------- Mon Oct 16 09:27:28 UTC 2017 - daniel.molkentin@suse.com diff --git a/dehydrated.service.in b/dehydrated.service.in index baf2ba2..6038ab0 100644 --- a/dehydrated.service.in +++ b/dehydrated.service.in @@ -6,7 +6,7 @@ Wants=acmeresponder.socket [Service] Type=oneshot -ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} ; +ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} \; ExecStart=/usr/bin/dehydrated --cron # dehydrated --cron will drop permissions and run critical code as dehydrated user.