aboutsummaryrefslogtreecommitdiffstats
path: root/debian/rules
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@debian.org>2021-02-15 00:32:29 +0100
committerGuilhem Moulin <guilhem@debian.org>2021-02-22 03:31:12 +0100
commita321c90db4a6d323f1a9bc06c4d861cee8868664 (patch)
tree7804d619f5198b4387fb64b78f1742035d80fd78 /debian/rules
parentf08eeeed6abaea2d6dbe8fd801eb0acd187e23d0 (diff)
Use dedicated system users for internal components.
* The internal webserver now runs as a dedicated system user _lacme-www (and group nogroup) instead of www-data:www-data. This is configurable in the [webserver] section of the lacme(8) configuration file. * The internal ACME client now runs as a dedicated system user _lacme-client (and group nogroup) instead of nobody:nogroup. This is configurable in the [client] section of the lacme(8) configuration file. * The _lacme-www and _lacme-client system users are created automatically by lacme.postinst (hence a new Depends: adduser), and deleted on purge. (So make sure not to chown any file to these internal users.)
Diffstat (limited to 'debian/rules')
-rwxr-xr-xdebian/rules4
1 files changed, 3 insertions, 1 deletions
diff --git a/debian/rules b/debian/rules
index cc86c79..9ba6afd 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,7 +1,9 @@
#!/usr/bin/make -f
override_dh_auto_build:
- dh_auto_build -- DESTDIR= exec_prefix=/usr datadir=/usr/share runstatedir=/run
+ dh_auto_build -- DESTDIR= exec_prefix=/usr datadir=/usr/share runstatedir=/run \
+ lacme_www_user=_lacme-www lacme_www_group=nogroup \
+ lacme_client_user=_lacme-client lacme_client_group=nogroup
%:
dh $@