yggdrasil-network/yggdrasil-go
1
0
Fork 0
mirror of https://github.com/yggdrasil-network/yggdrasil-go.git synced 2025-04-28 06:05:06 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

[deb] Don't run as root

Browse source
This commit is contained in:
Lamp 2025-04-11 14:47:33 -07:00
parent 5b8dbc8b1e
commit 46878fb810
2 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
contrib/deb/generate.sh
View file

@ -79,9 +79,7 @@ cat > /tmp/$PKGNAME/debian/postinst << EOF
systemctl daemon-reload systemctl daemon-reload
if ! getent group yggdrasil 2>&1 > /dev/null; then adduser --system --home /nonexistant --no-create-home --group --quiet yggdrasil
groupadd --system --force yggdrasil
fi
if [ ! -d /etc/yggdrasil ]; if [ ! -d /etc/yggdrasil ];
then then

2
contrib/systemd/yggdrasil.service.debian
View file

@ -6,7 +6,7 @@ After=network-online.target
After=yggdrasil-default-config.service After=yggdrasil-default-config.service
[Service] [Service]
Group=yggdrasil User=yggdrasil
ProtectHome=true ProtectHome=true
ProtectSystem=strict ProtectSystem=strict
NoNewPrivileges=true NoNewPrivileges=true