| Nico Huber | a1a296f | 2023-06-25 10:07:07 +0000 | [diff] [blame] | 1 | #!/bin/sh |
| 2 | |||||
| 3 | set -e | ||||
| 4 | |||||
| 5 | # Allows us to bind mount arbitrary owned files | ||||
| Nico Huber | b650ed4 | 2023-07-20 17:08:54 +0000 | [diff] [blame^] | 6 | chown -R gerrit:gerrit /var/gerrit/{logs,etc,db,git,index,cache,passwd}/ |
| Nico Huber | a1a296f | 2023-06-25 10:07:07 +0000 | [diff] [blame] | 7 | |
| 8 | # Drop privileges as we set `USER root` only to change file permissions | ||||
| 9 | exec setpriv --reuid=gerrit --regid=gerrit --init-groups --inh-caps=-all /unprivileged.sh "$@" | ||||