[deb] Don't run as root

This commit is contained in:
Lamp 2025-04-11 14:47:33 -07:00
parent 5b8dbc8b1e
commit 46878fb810
2 changed files with 2 additions and 4 deletions

View file

@ -79,9 +79,7 @@ cat > /tmp/$PKGNAME/debian/postinst << EOF
systemctl daemon-reload
if ! getent group yggdrasil 2>&1 > /dev/null; then
groupadd --system --force yggdrasil
fi
adduser --system --home /nonexistant --no-create-home --group --quiet yggdrasil
if [ ! -d /etc/yggdrasil ];
then

View file

@ -6,7 +6,7 @@ After=network-online.target
After=yggdrasil-default-config.service
[Service]
Group=yggdrasil
User=yggdrasil
ProtectHome=true
ProtectSystem=strict
NoNewPrivileges=true