From: Ansgar Burchardt <ansgar@debian.org>
Date: Sat, 19 Jan 2013 14:20:58 +0000 (+0100)
Subject: Run debianqueued as dak-unpriv.
X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3501ca76cfdd9b9a404b113c9c539b7fd9dcbe68;p=dak

Run debianqueued as dak-unpriv.

We also need to run show-deferred as dak-unpriv as it changes
permissions of some files in the deferred queues.
---

diff --git a/config/debian/cron.hourly b/config/debian/cron.hourly
index 51f9d812..a8ccfe70 100755
--- a/config/debian/cron.hourly
+++ b/config/debian/cron.hourly
@@ -34,7 +34,7 @@ fi
 
 dak queue-report -n > $webdir/new.html
 dak queue-report -8 -d new,byhand,stable-new,oldstable-new -r $webdir/stat
-dak show-deferred -r $webdir/stat > ${webdir}/deferred.html
+sudo -u dak-unpriv dak show-deferred -r $webdir/stat > ${webdir}/deferred.html
 dak graph -n new,byhand,stable-new,oldstable-new,deferred -r $webdir/stat -i $webdir/stat -x $scriptsdir/rrd-release-freeze-dates
 
 cd $webdir
diff --git a/config/debian/crontab b/config/debian/crontab
index f1bc0685..eb861b45 100644
--- a/config/debian/crontab
+++ b/config/debian/crontab
@@ -15,5 +15,5 @@ PATH=/usr/local/bin:/usr/bin:/bin
 
 # We do like our queued and make sure it will always be there.
 # Luckily it checks itself and doesn't start if it already runs
-@reboot /srv/queued/debianqueued-0.9/debianqueued
-*/10        *          *   *   *   /srv/queued/debianqueued-0.9/debianqueued 2>/dev/null
+@reboot sudo -u dak-unpriv /srv/queued/debianqueued-0.9/debianqueued
+*/10        *          *   *   *   sudo -u dak-unpriv /srv/queued/debianqueued-0.9/debianqueued 2>/dev/null