Change initscript to run leap-mx as an unpriviledged user (#7634)

1 files changed, 5 insertions, 1 deletions

diff --git a/pkg/leap-mx.init b/pkg/leap-mx.init
index 0c66bc5..3878bce 100644
--- a/pkg/leap-mx.init
+++ b/pkg/leap-mx.init
@@ -14,6 +14,8 @@ PIDFILE=/var/run/leap_mx.pid
 RUNDIR=/var/lib/leap_mx/
 FILE=/usr/share/app/leap_mx.tac
 TWISTD_PATH=/usr/bin/twistd
+USER=leap-mx
+GROUP=leap-mx
 
 [ -r /etc/default/leap_mx ] && . /etc/default/leap_mx
 
@@ -32,7 +34,9 @@ case "$1" in
                           --rundir=$RUNDIR \
                           --python=$FILE \
                           --syslog \
-                          --prefix=leap-mx
+                          --prefix=leap-mx \
+                          --uid=$USER \
+                          --gid=$GROUP
         echo "."
     ;;