[ARVADOS] updated: 1.3.0-2970-g8fedd6362

[Git user]

Summary of changes:
 lib/boot/nginx.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

       via  8fedd6362dd97202b938bcfa3832e4bb1b3770dc (commit)
      from  ab5199f71c7eaf8bf8fe2b4477353cf432faf1a7 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 8fedd6362dd97202b938bcfa3832e4bb1b3770dc
Author: Ward Vandewege <ward at curii.com>
Date:   Mon Nov 9 13:23:35 2020 -0500

    16306: Make sure that the non-passenger nginx process runs as the
           www-data user, not the default 'nobody' user.
    
    Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward at curii.com>

diff --git a/lib/boot/nginx.go b/lib/boot/nginx.go
index b11d9fd49..6dcec3912 100644
--- a/lib/boot/nginx.go
+++ b/lib/boot/nginx.go
@@ -105,7 +105,7 @@ func (runNginx) Run(ctx context.Context, fail func(error), super *Supervisor) er
 		defer super.waitShutdown.Done()
 		fail(super.RunProgram(ctx, ".", nil, nil, nginx,
 			"-g", "error_log stderr info;",
-			"-g", "pid "+filepath.Join(super.tempdir, "nginx.pid")+";",
+			"-g", "user www-data; pid "+filepath.Join(super.tempdir, "nginx.pid")+";",
 			"-c", conffile))
 	}()
 	// Choose one of the ports where Nginx should listen, and wait

-----------------------------------------------------------------------


hooks/post-receive
--