distribution: set permissions on api sockets

This fixes permission for the weldr sockets: allow users in group
`weldr` to access them, but nobody else. Also add this group to the
sysusers file.

Fixes #646
This commit is contained in:
Lars Karlitski 2020-05-19 19:40:42 +02:00 committed by Tom Gundersen
parent 1d16dc4d73
commit b0daa82fad
2 changed files with 3 additions and 0 deletions

View file

@ -1 +1,2 @@
u _osbuild-composer - "OSBuild Composer user"
g weldr -

View file

@ -4,6 +4,8 @@ Description=OSBuild Composer API sockets
[Socket]
ListenStream=/run/weldr/api.socket
ListenStream=/run/osbuild-composer/job.socket
SocketGroup=weldr
SocketMode=660
[Install]
WantedBy=sockets.target