Skip to content
Snippets Groups Projects
Commit 1b08b512 authored by Daniel Baumann's avatar Daniel Baumann Committed by P. Christeas
Browse files

Managing setup of unprivileged user account with debconf.

bzr revid: p_christ@hol.gr-20090824180204-xko5qa7welktg9gs
parent 4aca0707
No related branches found
No related tags found
No related merge requests found
Showing
with 546 additions and 13 deletions
......@@ -2,7 +2,7 @@ Source: openerp-server
Section: net
Priority: optional
Maintainer: Daniel Baumann <daniel@debian.org>
Build-Depends: debhelper (>= 7), quilt, python-dev
Build-Depends: debhelper (>= 7), quilt, po-debconf, python-dev
Build-Depends-Indep: python-lxml, python-xml, python-libxslt1, python-psycopg2
Standards-Version: 3.8.2
Homepage: http://www.openerp.com/
......
#!/bin/sh
set -e
. /usr/share/debconf/confmodule
db_input low openerp-server/username || true
db_go
db_stop
debian/openerp-server.preseed
......@@ -2,25 +2,39 @@
set -e
USER="openerp"
. /usr/share/debconf/confmodule
CONFFILE="/etc/openerp-server.conf"
LOGFILE="/var/log/openerp.log"
case "${1}" in
configure)
# Creating system user
adduser --no-create-home --quiet --system ${USER}
db_version 2.0
db_get openerp-server/username
_USERNAME="${RET:-openerp}"
db_stop
if ! getent passwd | grep -q "^${_USERNAME}"
then
adduser --system --no-create-home --quiet --gecos 'OpenERP server' --group ${_USERNAME}
else
echo "OpenERP user (${_USERNAME}) already exists, doing nothing."
fi
sed -i -e "s|^process_user.*$|process_user = ${_USERNAME}|" ${CONFFILE}
# Creating log file
touch ${LOGFILE}
chown ${USER}:adm ${LOGFILE}
chown ${_USERNAME}:adm ${LOGFILE}
chmod 0640 ${LOGFILE}
# Setting ownership
chown ${USER} /usr/lib/openerp-server/addons -R
# Setting ownership and permissions
chown ${_USERNAME} /usr/lib/openerp-server/addons -R
chmod 0640 ${CONFFILE}
chown ${USER} ${CONFFILE}
chown ${_USERNAME}:${_USERNAME} ${CONFFILE}
echo
echo "* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *"
......
......@@ -2,18 +2,44 @@
set -e
USER="openerp"
if [ -e /usr/share/debconf/confmodule ]
then
_DEBCONF="true"
. /usr/share/debconf/confmodule
fi
case "${1}" in
purge)
# Removing system user
remove)
if [ "${_DEBCONF}" = "true" ]
then
db_version 2.0
db_get openerp-server/username
_USERNAME="${RET}"
db_stop
fi
if [ -z "${_USERNAME}" ]
then
_USERNAME="openerp"
fi
_GROUPNAME="${_USERNAME}"
if [ -x /usr/sbin/deluser ]
then
deluser --quiet --system ${USER}
deluser --quiet --system ${_USERNAME}
fi
if [ -x /usr/sbin/delgroup ]
then
delgroup --quiet --system --only-if-empty ${_GROUPNAME} || true
fi
;;
remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
purge|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
;;
......
################################################################################
## openerp-server
#openerp-server openerp-server/username string openerp
################################################################################
Template: openerp-server/username
Type: string
Default: openerp
_Description: Dedicated system account for the OpenERP server:
The OpenERP server must use a dedicated account for its operation so that
the system's security is not compromised by running it with superuser
privileges.
.
Please choose that account's username.
[type: gettext/rfc822deb] openerp-server.templates
# Czech translation of openerp-server debconf templates.
# Copyright (C) 2009 Vítězslav Kotrla <vitezslav.kotrla@gmail.com>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-05-30 08:24+0000\n"
"PO-Revision-Date: 2009-06-21 08:20+0200\n"
"Last-Translator: Vítězslav Kotrla <vitezslav.kotrla@gmail.com>\n"
"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
#. Type: string
#. Description
#: ../openerp-server.templates:1001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Vyhrazený systémový účet, pod kterým bude běžet OpenERP server:"
#. Type: string
#. Description
#: ../openerp-server.templates:1001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"Pokud by byl OpenERP server spuštěn se superuživatelskými oprávněními, mohlo by dojít "
"ke kompromitaci zabezpečení systému. Proto musí OpenERP server pro svoji činnost používat "
"vyhrazený neprivilegovaný účet."
#. Type: string
#. Description
#: ../openerp-server.templates:1001
msgid "Please choose that account's username."
msgstr "Zvolte prosím název totoho účtu."
# German translation of openerp-server debconf templates.
# Copyright (C) 2009 Kai Wasserbäch <debian@carbon-project.org>
# Copyright (C) 2009 Helge Kreutzmann <debian@helgefjell.de>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-06 19:01+0200\n"
"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
"Language-Team: German <debian-l10n-german@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Eigenes Systemkonto für den OpenERP-Server:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"Der OpenERP-Server muss ein eigenes Konto für den Betrieb verwenden, um die "
"Sicherheit des Systems nicht durch das Betreiben mit Superuser-Rechten zu "
"kompromittieren."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Bitte wählen Sie den Benutzernamen dieses Kontos."
# Spanish translation of openerp-server debconf templates.
# Copyright (C) 2009 Software in the Public Interest
# 2009 Fernando González de Requena <fgrequena@gmail.com>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-03-30 22:35+0200\n"
"Last-Translator: Fernando González de Requena <fgrequena@gmail.com>\n"
"Language-Team: Spanish <debian-l10n-spanish@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Cuenta del sistema dedicada para el servidor OpenERP:"
#. Type: string
#. Description
#: ../openerp-server:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"El servidor de OpenERP debe utilizar una cuenta dedicada para su funcionamiento, "
"de tal modo que la seguridad del sistema no se vea comprometida por su "
"utilización con privilegios de administración."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Elija un nombre de usuario para esa cuenta."
# Finnish translation of openerp-server debconf templates.
# Copyright (C) 2009 Esko Arajärvi
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-07 22:19+0300\n"
"Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: Lokalize 0.3\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Dedikoitu järjestelmätunnus OpenERP-taustaohjelman ajamiseen:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"OpenERP-palvelimen tulee käyttää dedikoitua tunnusta toiminnoissaan, jotta "
"järjestelmän turvallisuus ei vaarannu kuten käytettäessä "
"pääkäyttäjäoikeuksia."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Valitse kyseisen tunnuksen nimi."
# French translation of openerp-server debconf templates.
# Copyright (C) 2009 Steve Petruzzello <dlist@bluewin.ch>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-03-26 01:12+0100\n"
"Last-Translator: Steve Petruzzello <dlist@bluewin.ch>\n"
"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Identifiant dédié pour le serveur OpenERP:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"Le serveur OpenERP doit être exécuté avec un identifiant spécifique, différent "
"du superutilisateur, afin de ne pas compromettre la sécurité du système."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Veuillez choisir cet identifiant."
# Galizian translation of openerp-server debconf templates.
# Copyright (C) 2009 Marce Villarino <mvillarino@gmail.com>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-15 21:32+0200\n"
"Last-Translator: marce villarino <mvillarino@users.sourceforge.net>\n"
"Language-Team: Galician <proxecto@trasno.ent>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: Lokalize 0.2\n"
"Plural-Forms: nplurals=2; plural=n != 1;\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Conta de usuario do sistema adicada ao servidor OpenERP:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"O servidor OpenERP debe empregar unha conta adicada a el para que a "
"seguridade do sistema non se poña en perigo ao executalo con privilexios de "
"administrador."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Escolla o nome de usuario desa conta."
# Italian translation of openerp-server debconf templates.
# Copyright (C) 2009 Vincenzo Campanella <vinz65@gmail.com>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-03-26 08:52+0100\n"
"Last-Translator: Vincenzo Campanella <vinz65@gmail.com>\n"
"Language-Team: Italian <tp@lists.linux.it>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Account di sistema dedicato per il server di OpenERP:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"Il server OpenERP deve utilizzare un account dedicato per eseguire le proprie "
"operazioni, in modo che la sicurezza del sistema non rischi di essere compromessa "
"eseguendolo con privilegi di superutente."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Scegliere il nome utente di tale account."
# Japanese translation of openerp-server debconf templates.
# Copyright (C) 2009 Hideki Yamane <henrich@debian.or.jp>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-09 19:20+0900\n"
"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. Type: string
#. Description
#: ../openerp-servera.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "OpenERP デーモン専用のシステムアカウント:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"OpenERP サーバはその動作について専用のアカウントを使うようになっているため、管理"
"者特権で動作していてもシステムのセキュリティは侵害されません。"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "アカウントのユーザ名を選んでください。"
# Portuguese translation of openerp-server debconf templates.
# Copyright (C) 2009 Américo Monteiro <a_monteiro@netcabo.pt>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-03-26 19:12+0000\n"
"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n"
"Language-Team: Portuguese <traduz@debianpt.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
#. Type: string
#. Description
#: ../openerp-servera.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Conta dedicada do sistema para o servidor OpenERP:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"O servidor OpenERP tem que usar uma conta dedicada para as suas operações, isto "
"para que a segurança do sistema não seja comprometida ao corrê-lo com "
"privilégios de superutilizador."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Por favor escolha o nome dessa conta."
# German translation of openerp-server debconf templates.
# Copyright (C) 2009 Sergey Alyoshin <alyoshin.s@gmail.com>
# Copyright (C) 2009 Yuri Kozlov <yuray@komyakino.ru>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server 5.0.1-0-2\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-08 21:08+0400\n"
"Last-Translator: Yuri Kozlov <yuray@komyakino.ru>\n"
"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%"
"10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Специально выделенная системная учётная запись для OpenERP службы:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"Для улучшения безопасности системы OpenERP сервер должен использовать специально "
"выделенную учётную запись, а не запускаться с правами суперпользователя."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Укажите имя такой учётной записи."
# Swedish translation of openerp-server debconf templates.
# Copyright (C) 2009 Martin Bagge <brother@bsnet.se>
# This file is distributed under the same license as the openerp-server package.
#
msgid ""
msgstr ""
"Project-Id-Version: openerp-server\n"
"Report-Msgid-Bugs-To: openerp-serverpackages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: 2009-04-07 18:36+0100\n"
"Last-Translator: Martin Bagge <brother@bsnet.se>\n"
"Language-Team: swedish <debian-l10n-swedish@lists.debian.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: KBabel 1.11.4\n"
"X-Poedit-Language: Swedish\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr "Dedikerat systemkonto för OpenERP server:"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
"OpenERP servern måste ha ett dedikerat konto för att fungera på ett säkert sätt, "
"att använda privilegier från en superanvändare är inte säkert."
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr "Ange kontots användarnamn."
# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: openerp-server@packages.debian.org\n"
"POT-Creation-Date: 2009-03-26 07:45+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=CHARSET\n"
"Content-Transfer-Encoding: 8bit\n"
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Dedicated system account for the OpenERP server:"
msgstr ""
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid ""
"The OpenERP server must use a dedicated account for its operation so that the "
"system's security is not compromised by running it with superuser privileges."
msgstr ""
#. Type: string
#. Description
#: ../openerp-server.templates:2001
msgid "Please choose that account's username."
msgstr ""
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment