From 32367c0872c4fc9e75c6bb95f6ab6bbb02c9123a Mon Sep 17 00:00:00 2001 From: Eric Long Date: Fri, 12 Jun 2026 15:13:08 +0800 Subject: [PATCH] systemd: run mimic as root Fixes #39 --- debian/control | 1 - debian/rules | 1 - install/mimic.sysusers | 1 - install/mimic@.service.in | 2 -- 4 files changed, 5 deletions(-) delete mode 100644 install/mimic.sysusers diff --git a/debian/control b/debian/control index 159156f..676a53e 100644 --- a/debian/control +++ b/debian/control @@ -6,7 +6,6 @@ Build-Depends: debhelper-compat (= 13), dh-sequence-dkms, dh-sequence-dlopenlibdeps, - dh-sequence-installsysusers, dh-exec, clang, python3, diff --git a/debian/rules b/debian/rules index ee313ea..bb874f4 100755 --- a/debian/rules +++ b/debian/rules @@ -25,7 +25,6 @@ override_dh_auto_configure: sed kmod/dkms.conf.in \ -e 's|@@EXTRA_OPTS@@|CHECKSUM_HACK=kfunc|' \ > kmod/dkms.conf - cp install/mimic.sysusers debian/mimic.sysusers override_dh_auto_build: tar xf `bash -c '_tarballs=(/usr/src/linux-source-*.tar.*); echo $${_tarballs[0]}'` diff --git a/install/mimic.sysusers b/install/mimic.sysusers deleted file mode 100644 index 9133013..0000000 --- a/install/mimic.sysusers +++ /dev/null @@ -1 +0,0 @@ -u mimic - "Mimic daemon user" diff --git a/install/mimic@.service.in b/install/mimic@.service.in index 0fdba01..658fc22 100644 --- a/install/mimic@.service.in +++ b/install/mimic@.service.in @@ -8,13 +8,11 @@ Type = notify ExecStart = @@MIMIC_EXEC@@ run %i -F @@MIMIC_CONFIG_PATH@@/%i.conf Restart = on-failure -User = mimic RuntimeDirectory = @@MIMIC_RUNTIME_DIR@@ RuntimeDirectoryMode = 0750 RuntimeDirectoryPreserve = yes CapabilityBoundingSet = CAP_SYS_ADMIN CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW -AmbientCapabilities = CAP_SYS_ADMIN CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW ProtectSystem = strict [Install]