Run debianqueued as dak-unpriv.

We also need to run show-deferred as dak-unpriv as it changes
permissions of some files in the deferred queues.

diff --git a/config/debian/cron.hourly b/config/debian/cron.hourly
index 51f9d8120a41983597019bdc21d2789f84ed8008..a8ccfe70bba0eac1b18993c2a3593e090fa1691c 100755 (executable)
--- a/config/debian/cron.hourly
+++ b/config/debian/cron.hourly
@@ -34,7 +34,7 @@ fi
 
 dak queue-report -n > $webdir/new.html
 dak queue-report -8 -d new,byhand,stable-new,oldstable-new -r $webdir/stat
-dak show-deferred -r $webdir/stat > ${webdir}/deferred.html
+sudo -u dak-unpriv dak show-deferred -r $webdir/stat > ${webdir}/deferred.html
 dak graph -n new,byhand,stable-new,oldstable-new,deferred -r $webdir/stat -i $webdir/stat -x $scriptsdir/rrd-release-freeze-dates
 
 cd $webdir

diff --git a/config/debian/crontab b/config/debian/crontab
index f1bc068513951cb23d9c8ade53fb1657e5a88613..eb861b45a8d96decf230edb90f3318d97c9bef9e 100644 (file)
--- a/config/debian/crontab
+++ b/config/debian/crontab
@@ -15,5 +15,5 @@ PATH=/usr/local/bin:/usr/bin:/bin
 
 # We do like our queued and make sure it will always be there.
 # Luckily it checks itself and doesn't start if it already runs
-@reboot /srv/queued/debianqueued-0.9/debianqueued
-*/10        *          *   *   *   /srv/queued/debianqueued-0.9/debianqueued 2>/dev/null
+@reboot sudo -u dak-unpriv /srv/queued/debianqueued-0.9/debianqueued
+*/10        *          *   *   *   sudo -u dak-unpriv /srv/queued/debianqueued-0.9/debianqueued 2>/dev/null