Skip to content

Commit

Permalink
Remove KOLIBRI_USER (kolibri) secondary group 'disk'
Browse files Browse the repository at this point in the history
  • Loading branch information
holta committed Mar 29, 2023
1 parent f878107 commit 0f9c6f2
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions roles/kolibri/tasks/install.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,9 +26,8 @@
- name: Create Linux user {{ kolibri_user }} and add it to groups {{ apache_user }}, disk
user:
name: "{{ kolibri_user }}"
groups:
- "{{ apache_user }}"
- disk # 2023-03-27: IS THIS REALLY NECESSARY? Unclear. "Mostly equivalent to root access" according to https://wiki.debian.org/SystemGroups
groups: "{{ apache_user }}" # 2023-03-29: Not really necessary (Kolibri is demonstrated to work without group 'www-data'). But it likely doesn't hurt.
#- disk # 2023-03-29: Tested to be unnec with USB sticks (with 64-bit RasPiOS). FWIW group 'disk' is "Mostly equivalent to root access" according to https://wiki.debian.org/SystemGroups
state: present
shell: /bin/false
system: yes
Expand Down

0 comments on commit 0f9c6f2

Please sign in to comment.