<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div> </div>
<div>Hey folks :-),</div>
<div> </div>
<div>first time I am here. Installed freeswitch a few months ago to receive and send faxes. But I had some "permission error" recently for receiving a fax unless I run freeswitch as root user. I tried to use the "<em>SUPPLEMENTARYGROUPS=</em>" setting in my systemd config file, but this didn't help.</div>
<div> </div>
<div>Basically the problem is this: I need freeswitch to write to some /var/spool/fax folder, and therefore I added the group "uucp" additionally to the user "freeswitch". So it's default group is the group "freeswitch", and "uucp" is a supplementary group of it.</div>
<div>I however noticed that, the freeswitch process doesn't honor any supplementary groups, just the UID and the default group id. I verified this via the "ps" command:</div>
<div>
<div> </div>
<div><em>root@jupiter:/tmp# ps -axo ppid,pid,uid,egid,supgid,cmd | grep freeswitch<br/>
1 2518 999 10 /usr/bin/freeswitch -u freeswitch -g uucp -ncwait -nonat</em><br/>
</div>
</div>
<div>Why is this so? - is it the fault of freeswitch or of my systemd service configuration of freeswitch?</div>
<div> </div>
<div>cheers</div>
<div>Steve</div>
<div> </div>
<div> </div>
<div> </div>
<div>I am running Debian buster and the latest release of freeswitch, so my systemd service config for freeswitch looked like that:
<div> </div>
<div><em>[Unit]<br/>
Description=freeswitch<br/>
Wants=network-online.target<br/>
Requires=network.target local-fs.target<br/>
After=network.target network-online.target local-fs.target</em></div>
<div><em>[Service]<br/>
; service<br/>
Type=forking<br/>
PIDFile=/run/freeswitch/freeswitch.pid<br/>
Environment="DAEMON_OPTS=-nonat"<br/>
Environment="USER=freeswitch"<br/>
Environment="GROUP=freeswitch"<br/>
EnvironmentFile=-/etc/default/freeswitch<br/>
ExecStartPre=/bin/chown -R ${USER}:${GROUP} /var/lib/freeswitch /var/log/freeswitch /etc/freeswitch /usr/share/freeswitch /var/run/freeswitch<br/>
ExecStart=/usr/bin/freeswitch -u ${USER} -g ${GROUP} -ncwait ${DAEMON_OPTS}<br/>
TimeoutSec=45s<br/>
Restart=always<br/>
; exec<br/>
;User=${USER}<br/>
;Group=${GROUP}</em></div>
<div> </div>
<div> </div>
<div>And I tried to add supplementary groups by adding:</div>
<div> </div>
<div><em>"SupplementaryGroups=freeswitch uucp"</em></div>
<div>after "PIDFILE=" line.</div>
<div> </div>
<div> </div>
</div></div></body></html>