commit c2dcb5fa6ea5ca08f1f40ddcb07211a11450d648 from: Omar Polo date: Sat Apr 27 16:17:37 2024 UTC contrib/gmid.service: start as root by default Various techniques used by gmid are effective only when the daemon is started as root. Strongly suggest to do so by switching the sample configuration. This way, provided that a local user is created as well, the chroot configuration will work out-of-the-box and the TLS certificates can be readable only by root. commit - 5d12e6a1047b1ddafb01fd3014fbb6c97d06b0a4 commit + c2dcb5fa6ea5ca08f1f40ddcb07211a11450d648 blob - 3090f38922fbd70adce47469c361d69764a00f7d blob + c7f9c30415ac2cfa9c7ce13352f9435d97bae9d9 --- contrib/gmid.service +++ contrib/gmid.service @@ -6,7 +6,7 @@ Wants=network-online.target [Service] Type=simple -User=gmid +User=root Group=nobody ExecStart=/usr/local/bin/gmid -f -c /etc/gmid.conf ExecStop=/bin/kill -TERM $MAINPID