aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAntoine Beaupré <anarcat@debian.org>2016-09-12 12:01:44 -0400
committerAntoine Beaupré <anarcat@debian.org>2016-09-12 12:04:34 -0400
commit1980b7cb4239463b581579cc39480774d3e2d2fe (patch)
treecf2e009c20790500210db16eb5c5a95e2ba5cb40
parentNeed to incrememt version in the right file. (diff)
downloadirker-1980b7cb4239463b581579cc39480774d3e2d2fe.tar.xz
run daemon as the irker user (Close: #832758)
this is an improvement upon the default .service file. it requires a irker user to be created, something which is automatically handled by the debian package, but should be handled by other distributions when deploying the .service file. there are obvious dangers in running irkerd as root: a compromise would be catastrophic, and since it runs on public servers that are traditionnally pretty hostile (IRC), it seems critical that rights of the daemon be limited.
-rw-r--r--irkerd.service1
1 files changed, 1 insertions, 0 deletions
diff --git a/irkerd.service b/irkerd.service
index d19378b..82f39b0 100644
--- a/irkerd.service
+++ b/irkerd.service
@@ -7,6 +7,7 @@ Requires=network.target
[Service]
ExecStart=/usr/bin/irkerd
+User=irker
[Install]
WantedBy=multi-user.target