[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: set permission/ownership for files generated by service
From: |
Efraim Flashner |
Subject: |
Re: set permission/ownership for files generated by service |
Date: |
Tue, 14 Jul 2020 15:36:41 +0300 |
On Tue, Jul 14, 2020 at 04:46:31PM +0430, Reza Alizadeh Majd wrote:
>
> I assume that I find the issue source:
>
> > > > >
> > > > >--8<---------------cut here---------------start------------->8---
> > > > >
> > > > >(define %kyc-accounts
> > > > > (list (user-group (name "kyc-service"))
> > > > > (user-group (name "kyc-rpc"))
> > > > > (user-account
> > > > > (name "kyc-service")
> > > > > (group "kyc-service")
> > > > > (system? #f)
> > > > > (supplementary-groups '("wheel" "kyc-rpc" "video"))
> > > > > (comment "KYC service user"))))
> > > > >
> > > > >--8<---------------cut here---------------end--------------->8---
> > > > >
>
> I modified the service definition to open an empty 'screen', so I can
> access shell through service, when I connect to the screen and check
> user groups, it seems that the 'supplementary-groups' didn't apply to
> the user:
>
> --8<---------------cut here---------------start------------->8---
> sh-5.0$ whoami
> kyc-service
> sh-5.0$ groups
> kyc-service
> sh-5.0$
> --8<---------------cut here---------------end--------------->8---
>
> so, is there any thing that I missed?
>
The only other thing I can think of right now is that you're creating
the kyc-service and kyc-rpc groups AND also using them for the first
time here. It could be that the kyc-service group is created with the
kyc-service user and the kyc-rpc group is 'too slow'. Try your code
again but without the kyc-rpc group.
--
Efraim Flashner <efraim@flashner.co.il> אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
signature.asc
Description: PGP signature