agl-persistent-storage-api: run as agl-driver 17/30317/2
authorScott Murray <scott.murray@konsulko.com>
Thu, 26 Sep 2024 17:07:24 +0000 (13:07 -0400)
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>
Mon, 30 Sep 2024 14:43:28 +0000 (14:43 +0000)
Tweak the agl-persistent-storage-api systemd unit to run the daemon
as the agl-driver user instead of root.  Another non-root user would
also be an option, but since there's no authentication scheme for the
API, running it as the same user as the applications seems reasonable
for now.

Bug-AGL: SPEC-5250

Change-Id: I57c9f8c108dd78b1fd6e5b011ed39e81946ab0bc
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl-demo/+/30317
ci-image-build: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Naoto YAMAGUCHI <naoto.yamaguchi@aisin.co.jp>
Tested-by: Jenkins Job builder account
recipes-demo/agl-persistent-storage-api/files/agl-persistent-storage-api.service

index 9f1f721..2e07de9 100644 (file)
@@ -5,7 +5,7 @@ After=network-online.target
 Type=simple
 ExecStart=/usr/bin/agl-service-persistent-storage
 Restart=on-failure
-#User=persistent-api
+User=agl-driver
 
 [Install]
 WantedBy=default.target