Skip to content

Packaging: build .deb packages with root ownership - #9

Closed
sp5wwp wants to merge 2 commits into
jancona:masterfrom
sp5wwp:master
Closed

sp5wwp wants to merge 2 commits into
jancona:masterfrom
sp5wwp:master

Conversation

@sp5wwp

@sp5wwp sp5wwp commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

dpkg-deb --build kept the build machine's file owners, so installed files (the systemd unit, the polkit rule, the config sample) belonged to UID/GID 1001, the GitHub runner user. On a hotspot that ID can belong to a local account, which could then edit the service to run commands as root. Build with --root-owner-group for both m17-gateway and m17-bridge.

@jancona

jancona commented Oct 6, 2026

Copy link
Copy Markdown
Owner

Thanks! Merged as ab2179a, with your two commits squashed into one under your name. I added 2c48aeb on top: the gateway postinst now gives /opt/m17 and /etc/polkit-1/rules.d back to root if an older package left them owned by UID 1001, since dpkg doesn't change the owner of a directory that already exists.

@jancona jancona closed this Oct 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants