Compare commits
No commits in common. "10dc7d0bc0e571af26bcc9b7b91fb60d8006ce6d" and "2fc63b154f5c6479d410fefe0eb68e431d9a3de6" have entirely different histories.
10dc7d0bc0
...
2fc63b154f
@ -82,13 +82,8 @@ runInstallWrite() {
|
||||
# password and BORG_/RESTIC_/KOPIA_ env vars reach the tool. Never root — the
|
||||
# scoped sudoers lets the manager drop to this user. Single funnel so the
|
||||
# backup subsystem's privilege drop has one audit point.
|
||||
# -H resets HOME to the target user's so restic finds (or creates) its cache
|
||||
# under /home/$docker_install_user/.cache/restic instead of inheriting the
|
||||
# manager's HOME (which dockerinstall can't write into, surfacing as
|
||||
# "unable to open cache: mkdir /home/libreportal/.cache/restic: permission denied"
|
||||
# on every backup).
|
||||
runBackupOp() {
|
||||
sudo -E -H -u "$docker_install_user" "$@"
|
||||
sudo -E -u "$docker_install_user" "$@"
|
||||
}
|
||||
|
||||
# Run one of the ROOT-OWNED LibrePortal helpers installed (root:root 0755) under
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user