Run user programs as nobody:nogroup

[gruntmaster-daemon.git] / ex / makevm

diff --git a/ex/makevm b/ex/makevm
index 91542781451ef2e4cc29b567558aca559b7cf703..c054cf15700bdf184137a2ecf3ec9d8c4039c3e4 100755 (executable)
--- a/ex/makevm
+++ b/ex/makevm
@@ -3,6 +3,8 @@ GROUP=$(getent group www-data | cut -f3 -d:)
 USER=$(getent passwd www-data | cut -f3 -d:)
 
 rm -rf vm/ vm.squashfs
+mkdir -p vm/proc/
+mount /proc -o bind vm/proc
 multistrap -f ex/vm.conf
 ln -s vm/usr/bin/mawk vm/bin/awk
 echo '/sbin/poweroff -f' > vm/.bash_logout
@@ -23,7 +25,8 @@ squashfs
 9pnet_virtio
 EOF
 install gruntmaster-exec gruntmaster-compile vm/usr/bin/
-sed -i -e "s/setgid 65534/setgid $GROUP/" -e "s/setuid 65534/setuid $USER/" vm/usr/bin/gruntmaster-exec
+sed -i -e "s/USER => 65534/USER => $USER/" -e "s/GROUP => 65534/GROUP => $GROUP/" vm/usr/bin/gruntmaster-exec
 chroot vm update-initramfs -d -k 3.2.0-4-amd64
 chroot vm update-initramfs -c -k 3.2.0-4-amd64
+umount vm/proc
 mksquashfs vm vm.squashfs -comp lzo