From nobody Sun Oct 13 04:41:45 2024 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XR74G6tGFz5ZWW4 for ; Sun, 13 Oct 2024 04:41:50 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from beta.fechner.net (beta.fechner.net [89.58.45.13]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4XR74G1W8Nz4Lyx for ; Sun, 13 Oct 2024 04:41:50 +0000 (UTC) (envelope-from idefix@fechner.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=fechner.net header.s=mail header.b=QIxc4wMM; spf=pass (mx1.freebsd.org: domain of idefix@fechner.net designates 89.58.45.13 as permitted sender) smtp.mailfrom=idefix@fechner.net; dmarc=pass (policy=none) header.from=fechner.net Received: from server.cy.idefix.lan (unknown [212.108.151.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) (Authenticated sender: idefix@fechner.net) by beta.fechner.net (Postfix) with ESMTPSA id 1CB242C91C for ; Sun, 13 Oct 2024 06:41:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fechner.net; s=mail; t=1728794507; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=ORFueKDEPFrBRJU+0kZbbYZgm5j+ES6WxDfTfL+wPA0=; b=QIxc4wMMKgGWkmD4AqwCCb5wy0aC9V+JUcqME6d4JXsIAk3uKikicbAziJYz8osfVoCn/k udVy0F7vzYqpdQ3GVJX+r8nGCAjuZ0rlE2s8iWssELlLZR9l6lAhiqHtWo8Sqh8j+QXS9m NPI85fgiJohFoFTDfH0XrSGguPwLDimB51CHLiaiIy3S7omlmIk5/Y/X3BtapdxSuwHgR8 pXAY5+jzPfw5H4LzkTDTR9UQyYIDiCczOb9smx2tfHvzqFyd2kAyQ6MGLXJ5ucRe3rY7Vc ThWYNst8SYUZ0o/umXAetX5B/Yzkp8d5R7Xuc0ly6EkolQq+SiRrKH+4vrU5Sw== Received: from [192.168.1.151] (unknown [192.168.1.151]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by server.cy.idefix.lan (Postfix) with ESMTPSA id 87CF2F5B for ; Sun, 13 Oct 2024 07:41:45 +0300 (EEST) Message-ID: <56e1162c-1fe7-475b-a98d-82d28ab28514@fechner.net> Date: Sun, 13 Oct 2024 07:41:45 +0300 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-ports@freebsd.org Sender: owner-freebsd-ports@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Cannot start service, initgroups(gotify,365): Operation not permitted To: ports@freebsd.org References: <5f24c902-919c-453d-8a59-d674138fd11c@fechner.net> <503778064.11874.1728722236313@localhost> Content-Language: en-US From: Matthias Fechner Autocrypt: addr=idefix@fechner.net; keydata= xsFNBFqca1YBEADM9mF2+ifk8HILTlf5wtAzV6SYVR4RvNOo/8Kucw4sCZT76zS1fjZe4Zy1 3C0IZ07Wi+3PnoGIgOCsXp3PrTc2nuHQWkwVBYXy8UaR9DHBWA/mIvRGG1ZscKQYA6oUdCvd K8Mu26zO60yTt+ONzFtK6G1myH4EHXZ8dpmdCFf+W3rzTU+aCQ5S3OfwCLGgYgOaVREGkdOc 5SVCpFb4n+2B8+CqeWsRHhnT+4h7/YhgDMGp4GiI3yrB2nBVSUUvcosD2nRtJQgGQHcAFtMq 3hJaKPOR/mHc6KVrp0xmGNmdtazvXloHmGIl9O1UpmMmrYu9Kugl0JkGi2fAcno02XgVlkyX 7xDLTteP5cNqRxor4yVDaRWUQnOfK9XgcrKGrAzb65BkCSkjT+Aw3S/A8Qd6NvjL9qy1d+Ct dzatOVF/Y7jaW28CMr3jvwPS13OxV7PnJzIZzdik20eVxfOXuYfxZD+PwBaGgFF0qj6zKACC aKLalE0ZpY0zNn/iPyQX/Cf9KoDyFpOHSsEswiJ5rCWwppVcsFyogHOemVmeaXlvyDPEipnV ZUkpGP/CCqPu3eD0uDzP7UJ0pt/l/JfW0Xw/4p9mjB024xiRlxLa6vSRfGl//EdtAIbKKa8x 5wsKTQEbYJDmXE3tH/A54DCqRXhcopTlu2iJlTdnIMltn9afVwARAQABzSVNYXR0aGlhcyBG ZWNobmVyIDxpZGVmaXhAZmVjaG5lci5uZXQ+wsGXBBMBCgBBAhsDBQkQ1NXWBQsJCAcDBRUK CQgLBRYDAgEAAh4BAheAFiEEaWB64mCp804YOtqutot13J/XR+EFAmQG0SwCGQEACgkQtot1 3J/XR+Fjrg/9GaU20f29YUAuXMpbOoWwJSJrx5At5wTB4LMiAGLo4626iaGpi9mjs2Msmd5q ZpygvQ8shRw6jntfZA5iNkvecT3DRe2V8s47NjKNZEgpLqPbXz8EKfA23Bc2ASk5kCUnhCre KszyLdUFlLApw4Z+I5foLmqvpJL5uexhMhIbJDukRInO0kmR3MI6pXC/S2r7l2YZmagngIQd TpX6NJwXvs4/GqTnxZ3ooulz1RCosGV07/1frGMDzBFOkjO2zzSY2mgkU8AiDA+cKkYtqNk3 l0ykJJvkO3wWIch8/Slc+/PvMOOA5wtn67mzB+5lkh4vpBihTZ/RFrbF/0BNTI3Lz5piZnqA A2DQKTH1IJtz7tZO0b6ERW9qBsqIbUH9Hr8264QsKJLXeuo51SsCqtiMLmqsSOMrZkuAlf2y OYOvABsDQRBRxBk/DbjexkR3JWnMV3OdolSbpvm0CjRTvXSQbMeNU2zpp/6a8ARKtU3lkExD tUP50mXFPcJ+b+ETSOqMCcqrllrQ43/Y9P7w7f9drPtTwJUbueHOvy42zNhRKgGV/dgLi4B7 3/egTGxoI0YGm38abZCl3IzZoJjkcWV0aC78Cud1bdX6QHzO0iPtohPd/R5RaUtskBezANLq BsmE1D0Je5zOS6qlzgwcBESKOfh7W/RLFxIIEtgvajhg1QvOwU0EWpxrVgEQAN3uCLHZF+1V gcrzYjwL1wAJwjYb7UnHKvNYdaBKgW0n0NTfaTCLHxHYPO8NlV1+lNctSeXLeiWpmE1lCDHq /++53EJ34OsRd/n246PdtfIfltML73tsmq6S9zTye2zv7LsmE7jgUBaasbv0qSLSybOUvkRx j3xBuK9Ymg/ZXaENOhxwIQ6oQoNLg3ers9t5Xl4NVK6gzzZ2OdTGnuUVhQmi4rbP04R0GJFh AtGLAYUCxlXVZhdPAs4qZaoAEP5nW/u2MyzSaIouwcEIdttAiPZdrJr+a4OGKz88Sn6zqKSa uyUADgX+G8tKUONgZbfz4SSRvlinOgyU2RyyfNS977r/YfaHH+oAxg31yUWPtD/ryfVw69bG vK8RQrZ9+c1vyWBABoQOh5+JHW/AE9Xj5dQatEfWmGO3+/FRo2TIhqZQXXl8PW+jtEjkhgOH OUX5ERzSm6nCcPIw+LUkEINcLc9bw4fv1eOWIdBuCckGM4rWXkLYbqhdSzdWeCsC0tiQk8x7 O1zXRJOKF4rITJd/qX322EH29BR+T9V1Hw7LDSRe+3YxtoXhROZRXjF8QniEHeKVNRUComr6 rWGmuHjsNTQ7twtwnG8xSOfCkYAp9GrbzBkIYX+VFvFQLqVM+It3RAlge/bwpZPvkr3bFsJk 4JS+EAugBIrP0xd9BMOh6Ej5ABEBAAHCwXwEGAEKACYWIQRpYHriYKnzThg62q62i3Xcn9dH 4QUCZAbRLQIbDAUJENTV1gAKCRC2i3Xcn9dH4VIDD/9L0+e4qnBd6pLWX49dcEMt7TLtyd9r aac0U4NbL4TZrae8bAN4poT6R8sGKSpB/eH4dOmLoxCCiqEfbbhIXLMHodHa8vr/sK6c1bxg dSF2K2zFTYO7vTjCJnmdHBQPWgj4KUnN9Fq6V6QF4Wp2rVRnTp88xvdiMrWyTXN+Mt6k99Cf /jZVCLw+ECb4EiydC1IbFl6oxFXitSvoT+mrnbr6PVCttebqCeCTqL+wXkj8FnGecjJZJ9Wp ukgq3aSnTV72GJziTpgjU1ZdigyvH1pf7GrNxq/gH+Axfs7pVOZmx3c45YPjrxDdPdpvPnT0 UpqqMI58pFm3WP+TbbtIbmCR5tOeB1hfztjOeA3UBf+I6X2yq19ABPJQt+ElKnRMyYTzhLfK B3l8kXeg02xECWoHk+XekETzfM87E3ewHblhibdZ+B+2d5YQOAniK5/gyHpMMq2wqSGuXAin RxSjP1oI2RpwTIN2/5/a2Z+kOAmJml7YkoSDCkzU+uDWHNNu0xNKTKixvUhr9IywRPK/dBvr E/eTYdQWrajBSpfMotoIXUl76M0jhJbwjIS6Nk+zmJwUxjq3SaUAUvIbUAHdJUXgujssKfyZ WrUiB7xi1zOkyP9T0HT2tHHA+/EGmfq5Ohe+IF4WpBJ37t12ZxelA7qXHbtPljz+Ptljs3tS zX4omw== In-Reply-To: <503778064.11874.1728722236313@localhost> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Action: no action X-Rspamd-Server: beta.fechner.net X-Spamd-Result: default: False [-6.69 / 15.00]; DWL_DNSWL_MED(-2.00)[fechner.net:dkim]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.996]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; DMARC_POLICY_ALLOW(-0.50)[fechner.net,none]; R_SPF_ALLOW(-0.20)[+a]; R_DKIM_ALLOW(-0.20)[fechner.net:s=mail]; RCVD_IN_DNSWL_MED(-0.20)[89.58.45.13:from]; MIME_GOOD(-0.10)[text/plain]; XM_UA_NO_VERSION(0.01)[]; MIME_TRACE(0.00)[0:+]; RCPT_COUNT_ONE(0.00)[1]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; ASN(0.00)[asn:197540, ipnet:89.58.44.0/22, country:DE]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[fechner.net:+]; TO_DN_NONE(0.00)[]; MLMMJ_DEST(0.00)[ports@freebsd.org]; PREVIOUSLY_DELIVERED(0.00)[ports@freebsd.org]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: 4XR74G1W8Nz4Lyx X-Spamd-Bar: ------ Am 12.10.2024 um 11:37 schrieb Ronald Klop: > sh -x /usr/local/etc/rc.d/gotify_server start > > Are your sure you ran 'service gotify_server start' as root? > The man pages say that iinitgroups can only return EPERM via a call to > setgroups when not run as root. thanks for the tip with sh -x, that made the problem visible. I changed now this line: command_args="-f -P ${pidfile} %%PREFIX%%/bin/gotify-server ${gotify_server_args}" This causes the execution of: + eval $' limits -C daemon  su -m gotify -c \'sh -c " /usr/sbin/daemon  -f -P /var/run/gotify_server.pid /usr/local/bin/gotify-server "\'' + limits -C daemon su -m gotify -c 'sh -c " /usr/sbin/daemon  -f -P /var/run/gotify_server.pid /usr/local/bin/gotify-server "' which is exactly what I want. The binary is now executed. There is no need to give a -u flag to daemon. Gruß Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook