summaryrefslogtreecommitdiffstats
path: root/debian/patches/0008-user-service.patch
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-06 00:50:22 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-06 00:50:22 +0000
commit4283a547939c204787a35239ff31758cccf2674f (patch)
tree961e298be9b22e950ab392515aa18ebb3de9bcd9 /debian/patches/0008-user-service.patch
parentAdding upstream version 2.18+dfsg. (diff)
downloadirker-debian.tar.xz
irker-debian.zip
Adding debian version 2.18+dfsg-3.debian/2.18+dfsg-3debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/patches/0008-user-service.patch')
-rw-r--r--debian/patches/0008-user-service.patch39
1 files changed, 39 insertions, 0 deletions
diff --git a/debian/patches/0008-user-service.patch b/debian/patches/0008-user-service.patch
new file mode 100644
index 0000000..06b6530
--- /dev/null
+++ b/debian/patches/0008-user-service.patch
@@ -0,0 +1,39 @@
+From: Python Applications Packaging Team
+ <python-apps-team@lists.alioth.debian.org>
+Date: Sun, 13 May 2018 15:07:57 +0200
+Subject: user-service
+MIME-Version: 1.0
+Content-Type: text/plain; charset="utf-8"
+Content-Transfer-Encoding: 8bit
+
+commit 1980b7cb4239463b581579cc39480774d3e2d2fe
+Author: Antoine Beaupré <anarcat@debian.org>
+Date: Mon Sep 12 12:01:44 2016 -0400
+
+ run daemon as the irker user (Close: #832758)
+
+ this is an improvement upon the default .service file. it requires a
+ irker user to be created, something which is automatically handled by
+ the debian package, but should be handled by other distributions when
+ deploying the .service file.
+
+ there are obvious dangers in running irkerd as root: a compromise
+ would be catastrophic, and since it runs on public servers that are
+ traditionnally pretty hostile (IRC), it seems critical that rights of
+ the daemon be limited.
+---
+ irkerd.service | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/irkerd.service b/irkerd.service
+index 74e9126..2318f54 100644
+--- a/irkerd.service
++++ b/irkerd.service
+@@ -7,6 +7,7 @@ Requires=network.target
+
+ [Service]
+ ExecStart=/usr/bin/irkerd
++User=irker
+
+ [Install]
+ WantedBy=multi-user.target