test: set correct group for systemd-journal-upload tests
We can't use the systemd-journal-upload user here, since it's created dynamically by DynamicUser=yes. However, we can use the group specified in SupplementaryGroups=, so do exactly that.
This commit is contained in:
@@ -161,8 +161,8 @@ openssl x509 -req -days 7 \
|
||||
-CA /run/systemd/remote-pki/ca.crt \
|
||||
-CAkey /run/systemd/remote-pki/ca.key \
|
||||
-out /run/systemd/remote-pki/server.crt
|
||||
setfacl -R -m "u:systemd-journal-remote:rwX" /run/systemd/remote-pki
|
||||
setfacl -R -m "u:systemd-journal-upload:rwX" /run/systemd/remote-pki
|
||||
chown -R systemd-journal-remote:systemd-journal /run/systemd/remote-pki
|
||||
chmod -R g+rwX /run/systemd/remote-pki
|
||||
|
||||
# Reconfigure journal-upload/journal remote with the new keys
|
||||
cat >/run/systemd/journal-remote.conf.d/99-test.conf <<EOF
|
||||
@@ -215,7 +215,8 @@ cat >/run/systemd/system/systemd-journal-upload.service.d/99-test.conf <<EOF
|
||||
Restart=no
|
||||
EOF
|
||||
systemctl daemon-reload
|
||||
setfacl -R -m "u:systemd-journal-upload:rwX" /run/systemd/journal-remote-tls
|
||||
chgrp -R systemd-journal /run/systemd/journal-remote-tls
|
||||
chmod -R g+rwX /run/systemd/journal-remote-tls
|
||||
|
||||
systemctl restart systemd-journal-upload
|
||||
timeout 10 bash -xec 'while [[ "$(systemctl show -P ActiveState systemd-journal-upload)" != failed ]]; do sleep 1; done'
|
||||
|
||||
Reference in New Issue
Block a user