external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00
Code Issues Releases Wiki Activity

network/tasks/squid.yml: Clarify user:group {{ proxy_user }} per #2948 discussion

Browse source
This commit is contained in:
A Holt 2021-08-17 12:34:19 -04:00 • committed by GitHub
parent 977c706024
commit c2734315a6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/network/tasks/squid.yml
View file

@ -14,11 +14,15 @@
state: stopped state: stopped
when: squid_installed is undefined when: squid_installed is undefined
- name: Create Squid user:group '{{ proxy_user }}' to own /library/cache # 2021-08-17: This stanza is gratuitous on most distros, where the user 'proxy'
# or 'squid' is preinstalled (typically with UID and GID 13 in /etc/passwd) but
# let's be sure, as distro internals / favorite distros change without warning.
- name: Ensure Linux user:group '{{ proxy_user }}:{{ proxy_user }}' exists, to own /library/cache -- and for recent versions of /usr/lib/systemd/system/squid.service that use 'Group=proxy'
user: user:
name: "{{ proxy_user }}" # proxy (or 'squid' on vars/centos-7.yml, vars/fedora-18.yml, vars/fedora-12.yml) name: "{{ proxy_user }}" # proxy (or 'squid' on vars/centos-7.yml, vars/fedora-18.yml, vars/fedora-12.yml)
createhome: False group: "{{ proxy_user }}"
shell: /bin/false create_home: False
shell: /bin/false # UNIX norm should work across all distros, overriding Debian/Ubuntu norm /usr/sbin/nologin
# 2021-08-16: Squid runs as 'nobody' when started as root: # 2021-08-16: Squid runs as 'nobody' when started as root:
# http://www.squid-cache.org/Doc/config/cache_effective_user/ # http://www.squid-cache.org/Doc/config/cache_effective_user/