From a5355cfefb2cc84849c8b84265992505020bf50c Mon Sep 17 00:00:00 2001
From: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
Date: Fri, 16 May 2014 12:39:08 +0200
Subject: [PATCH] use user scm to run scm-server for rpm package installations

---
 scm-server/pom.xml                            | 15 +++++++++++----
 scm-server/src/main/nativepkg/default         |  4 ++--
 scm-server/src/main/nativepkg/rpm-create-user |  5 +++++
 3 files changed, 18 insertions(+), 6 deletions(-)
 create mode 100644 scm-server/src/main/nativepkg/rpm-create-user

diff --git a/scm-server/pom.xml b/scm-server/pom.xml
index 2256557213..0aac5b430e 100644
--- a/scm-server/pom.xml
+++ b/scm-server/pom.xml
@@ -178,6 +178,7 @@
             <executions>
               <execution>
                 <goals>
+                  <goal>deb</goal>
                   <goal>rpm</goal>
                 </goals>
                 <phase>package</phase>
@@ -197,6 +198,7 @@
                 <architecture>noarch</architecture>
                 <os>linux</os>
               </platform>
+              <rpmPreInstallScript>${project.basedir}/src/main/nativepkg/rpm-create-user</rpmPreInstallScript>
               <mappings>
                 <files>
                   <file>
@@ -245,10 +247,6 @@
                   </file>
                 </files>
                 <links>
-                  <link>
-                    <source>/usr/sbin/scm-server</source>
-                    <target>/opt/scm-server/bin/scm-server</target>
-                  </link>
                   <link>
                     <source>/opt/scm-server/var/log</source>
                     <target>/var/log/scm</target>
@@ -265,12 +263,21 @@
                   </directory>
                   <directory>
                     <path>/var/cache/scm/work</path>
+                    <uname>scm</uname>
+                    <gname>scm</gname>
+                    <dirMode>0700</dirMode>
                   </directory>
                   <directory>
                     <path>/var/log/scm</path>
+                    <uname>root</uname>
+                    <gname>scm</gname>
+                    <dirMode>0770</dirMode>
                   </directory>
                   <directory>
                     <path>/var/lib/scm</path>
+                    <uname>scm</uname>
+                    <gname>scm</gname>
+                    <dirMode>0700</dirMode>
                   </directory>
                 </directories>
               </mappings>         
diff --git a/scm-server/src/main/nativepkg/default b/scm-server/src/main/nativepkg/default
index 2df2561404..0699a2e50a 100644
--- a/scm-server/src/main/nativepkg/default
+++ b/scm-server/src/main/nativepkg/default
@@ -33,10 +33,10 @@
 PORT=8080
 
 # change user
-# USER=scm
+USER=scm
 
 # home of scm-manager
-SCM_HOME=/var/lib/scm
+export SCM_HOME=/var/lib/scm
 
 # alternative jvm path
 JAVA_HOME="/usr/lib/jvm/jre"
diff --git a/scm-server/src/main/nativepkg/rpm-create-user b/scm-server/src/main/nativepkg/rpm-create-user
new file mode 100644
index 0000000000..82398c513c
--- /dev/null
+++ b/scm-server/src/main/nativepkg/rpm-create-user
@@ -0,0 +1,5 @@
+getent group scm >/dev/null || groupadd -r scm
+getent passwd scm >/dev/null || \
+    useradd -r -g scm -M -s /sbin/nologin \
+    -c "user for the scm-server process" scm
+exit 0
\ No newline at end of file