fix(hermesagent): shim handles hermes user invocation
runuser requires root. When the hermes user calls the shim directly (e.g. via su - hermes), exec the binary directly instead.
This commit is contained in:
@@ -120,7 +120,11 @@ msg_info "Creating Hermes Shim"
|
|||||||
cat <<'EOF' >/usr/bin/hermes
|
cat <<'EOF' >/usr/bin/hermes
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
cd /home/hermes
|
cd /home/hermes
|
||||||
exec runuser -u hermes -- /home/hermes/.local/bin/hermes "$@"
|
if [[ "$(id -u)" -eq 0 ]]; then
|
||||||
|
exec runuser -u hermes -- /home/hermes/.local/bin/hermes "$@"
|
||||||
|
else
|
||||||
|
exec /home/hermes/.local/bin/hermes "$@"
|
||||||
|
fi
|
||||||
EOF
|
EOF
|
||||||
chmod +x /usr/bin/hermes
|
chmod +x /usr/bin/hermes
|
||||||
msg_ok "Created Hermes Shim"
|
msg_ok "Created Hermes Shim"
|
||||||
|
|||||||
Reference in New Issue
Block a user