summaryrefslogtreecommitdiffstats
path: root/specs
diff options
context:
space:
mode:
authorChristian Heimes <cheimes@redhat.com>2015-07-15 21:49:16 +0200
committerMatthew Harmsen <mharmsen@redhat.com>2015-07-15 21:29:20 -0600
commit417adee8bc0607ccf43f1dd80fc08b870088937b (patch)
treea03bbc16f24c56e673a78e26b972c9623bb88c9b /specs
parent9fa1d0c968977ef23e26556b0a8e8e76b32c7288 (diff)
downloadpki-417adee8bc0607ccf43f1dd80fc08b870088937b.tar.gz
pki-417adee8bc0607ccf43f1dd80fc08b870088937b.tar.xz
pki-417adee8bc0607ccf43f1dd80fc08b870088937b.zip
Create pkiuser user and group during installation
The group 'pkiuser' and user 'pkiuser' are now created during the installation of the pki-server package. https://fedorahosted.org/pki/ticket/1468
Diffstat (limited to 'specs')
-rw-r--r--specs/pki-core.spec19
1 files changed, 19 insertions, 0 deletions
diff --git a/specs/pki-core.spec b/specs/pki-core.spec
index 148c90734..6ac51d85e 100644
--- a/specs/pki-core.spec
+++ b/specs/pki-core.spec
@@ -30,6 +30,13 @@ distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
# REMINDER: Remove this '%%define' once 'tpsclient' is rewritten as a Java app
%define _unpackaged_files_terminate_build 0
+# pkiuser and group. The uid and gid are preallocated
+# see /usr/share/doc/setup/uidgid
+%define pki_username pkiuser
+%define pki_uid 17
+%define pki_groupname pkiuser
+%define pki_gid 17
+%define pki_homedir /usr/share/pki
Name: pki-core
Version: 10.2.6
@@ -395,6 +402,7 @@ Requires: velocity
Requires(post): systemd-units
Requires(preun): systemd-units
Requires(postun): systemd-units
+Requires(pre): shadow-utils
%if 0%{?rhel}
Requires: tomcatjss >= 7.1.0-6
@@ -727,6 +735,17 @@ if (test("/etc/sysconfig/pki/ca") or
end
%endif
+%pre -n pki-server
+getent group %{pki_groupname} >/dev/null || groupadd -f -g %{pki_gid} -r %{pki_groupname}
+if ! getent passwd %{pki_username} >/dev/null ; then
+ if ! getent passwd %{pki_uid} >/dev/null ; then
+ useradd -r -u %{pki_uid} -g %{pki_groupname} -d %{pki_homedir} -s /sbin/nologin -c "Certificate System" %{pki_username}
+ else
+ useradd -r -g %{pki_groupname} -d %{pki_homedir} -s /sbin/nologin -c "Certificate System" %{pki_username}
+ fi
+fi
+exit 0
+
%post -n pki-base
if [ $1 -eq 1 ]