- actually try to find the real path to bash and don't hardcode

/usr/bin/bash

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=18

dehydrated.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Oct 20 10:55:26 UTC 2017 - mrueckert@suse.de
+
+- actually try to find the real path to bash and don't hardcode
+  /usr/bin/bash
+
 -------------------------------------------------------------------
 Thu Oct 19 08:11:20 UTC 2017 - daniel.molkentin@suse.com
 

dehydrated.service.in

@@ -7,7 +7,8 @@ Wants=acmeresponder.socket
 [Service]
 Type=oneshot
 ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} \;
-ExecStart=/usr/bin/dehydrated --cron
+EnvironmentFile=/etc/dehydrated/config
+ExecStart=/usr/bin/su -s /bin/bash -c "/usr/bin/dehydrated --cron" -g $DEHYDRATED_GROUP $DEHYDRATED_USER
 
 # dehydrated --cron will drop permissions and run critical code as dehydrated user.
 User=root

dehydrated.spec

@@ -207,7 +207,7 @@ mkdir -p %{buildroot}%{_postrunhooks}
 cat %{SOURCE8} | gzip > %{buildroot}%{_mandir}/man1/dehydrated.1.gz
 
 # Silence E: env-script-interpreter
-find \( -name \*.sh -o -name dehydrated \) -exec sed -i 's,#!/usr/bin/env bash,#!/usr/bin/bash,g' {} \;
+find \( -name \*.sh -o -name dehydrated \) -exec sed -i "s,#!/usr/bin/env bash,#!$(command -v bash),g" {} \;
 
 sed -i "s,#WELLKNOWN=.*,WELLKNOWN=%{_challengedir},g" docs/examples/config
 install -m 0644 docs/examples/* %{buildroot}%{_home}