SHA256
1
0
forked from pool/dehydrated

- actually try to find the real path to bash and don't hardcode

/usr/bin/bash

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=19
This commit is contained in:
Marcus Rückert 2017-10-20 11:02:37 +00:00 committed by Git OBS Bridge
parent dd7fda6243
commit 69cee6f711
2 changed files with 6 additions and 2 deletions

View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 20 11:02:24 UTC 2017 - mrueckert@suse.de
- revert accidental change to the service file
-------------------------------------------------------------------
Fri Oct 20 10:55:26 UTC 2017 - mrueckert@suse.de

View File

@ -7,8 +7,7 @@ Wants=acmeresponder.socket
[Service]
Type=oneshot
ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} \;
EnvironmentFile=/etc/dehydrated/config
ExecStart=/usr/bin/su -s /bin/bash -c "/usr/bin/dehydrated --cron" -g $DEHYDRATED_GROUP $DEHYDRATED_USER
ExecStart=/usr/bin/dehydrated --cron
# dehydrated --cron will drop permissions and run critical code as dehydrated user.
User=root