MT#4895 drop root privileages

debian/ngcp-panel.init

@@ -14,13 +14,14 @@
 
 DAEMON=/usr/share/ngcp-panel/ngcp_panel_fastcgi.pl
 HOMEDIR=/usr/share/ngcp-panel
+HOMERUN=/var/run/fastcgi
 PIDFILE=/var/run/ngcp-panel.pid
 USER=www-data
 GROUP=www-data
 NAME="ngcp-panel"
 DESC="NGCP-Panel Webapp"
 DEFAULTS=/etc/default/$NAME
-USOCKET=/var/run/ngcp-panel.sock
+USOCKET=$HOMERUN/ngcp-panel.sock
 LOGERR=/var/log/ngcp/ngcp-panel.log
 NPROC=1
 
@@ -42,7 +43,7 @@ _start() {
   start-stop-daemon --start --quiet \
         --pidfile $PIDFILE \
         --exec $DAEMON --chdir $HOMEDIR \
-        --user $USER --group $GROUP \
+        --user $USER --group $GROUP --chuid $USER:$GROUP \
         -- $OPTIONS || log_failure_msg "error"
   sleep 1
   if check_running ; then
@@ -88,6 +89,11 @@ if [ "$RUN_DAEMON" != "yes" ]; then
     exit 0
 fi
 
+if [ ! -d $HOMERUN ]; then
+  mkdir -p $HOMERUN
+  chown -R $USER:$GROUP
+fi
+
 case "$1" in
   start)
         log_daemon_msg "Starting $DESC: $NAME"

debian/ngcp-panel.preinst

@@ -20,6 +20,11 @@ case "$1" in
     	echo "Deactivating ngcp-panel on apache"
     	rm /etc/apache2/sites-enabled/ngcp-panel
     fi
+    # fix tmp perms
+    if [ -d /tmp/ngcp ]; then
+        echo "fixing /tmp/ngcp dir perms"
+        chown -R www-data:www-data /tmp/ngcp
+    fi
     ;;
 
     abort-upgrade)