<div><div dir="auto">freeswitch typically starts as root to set certain system settings then drops perms to the -u and -g params passed. if you want to not drop perms you don’t use -u and -g but then you need to make sure all that stuff is set properly first. you will have to dig in code for everything we set but there are things for the scheduler for sure that won’t work without right perms in place at startup </div></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Aug 23, 2019 at 11:23 AM <<a href="mailto:stevie.holpp@web.de">stevie.holpp@web.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:Verdana;font-size:12.0px"><div> </div>
<div>Hey folks :-),</div>
<div> </div>
<div>first time I am here. Installed freeswitch a few months ago to receive and send faxes. But I had some "permission error" recently for receiving a fax unless I run freeswitch as root user. I tried to use the "<em>SUPPLEMENTARYGROUPS=</em>" setting in my systemd config file, but this didn't help.</div>
<div> </div>
<div>Basically the problem is this: I need freeswitch to write to some /var/spool/fax folder, and therefore I added the group "uucp" additionally to the user "freeswitch". So it's default group is the group "freeswitch", and "uucp" is a supplementary group of it.</div>
<div>I however noticed that, the freeswitch process doesn't honor any supplementary groups, just the UID and the default group id. I verified this via the "ps" command:</div>
<div>
<div> </div>
<div><em>root@jupiter:/tmp# ps -axo ppid,pid,uid,egid,supgid,cmd | grep freeswitch<br>
1 2518 999 10 /usr/bin/freeswitch -u freeswitch -g uucp -ncwait -nonat</em><br>
</div>
</div>
<div>Why is this so? - is it the fault of freeswitch or of my systemd service configuration of freeswitch?</div>
<div> </div>
<div>cheers</div>
<div>Steve</div>
<div> </div>
<div> </div>
<div> </div>
<div>I am running Debian buster and the latest release of freeswitch, so my systemd service config for freeswitch looked like that:
<div> </div>
<div><em>[Unit]<br>
Description=freeswitch<br>
Wants=network-online.target<br>
Requires=network.target local-fs.target<br>
After=network.target network-online.target local-fs.target</em></div>
<div><em>[Service]<br>
; service<br>
Type=forking<br>
PIDFile=/run/freeswitch/freeswitch.pid<br>
Environment="DAEMON_OPTS=-nonat"<br>
Environment="USER=freeswitch"<br>
Environment="GROUP=freeswitch"<br>
EnvironmentFile=-/etc/default/freeswitch<br>
ExecStartPre=/bin/chown -R ${USER}:${GROUP} /var/lib/freeswitch /var/log/freeswitch /etc/freeswitch /usr/share/freeswitch /var/run/freeswitch<br>
ExecStart=/usr/bin/freeswitch -u ${USER} -g ${GROUP} -ncwait ${DAEMON_OPTS}<br>
TimeoutSec=45s<br>
Restart=always<br>
; exec<br>
;User=${USER}<br>
;Group=${GROUP}</em></div>
<div> </div>
<div> </div>
<div>And I tried to add supplementary groups by adding:</div>
<div> </div>
<div><em>"SupplementaryGroups=freeswitch uucp"</em></div>
<div>after "PIDFILE=" line.</div>
<div> </div>
<div> </div>
</div></div></div>
_________________________________________________________________________<br>
<br>
The FreeSWITCH project is sponsored by SignalWire <a href="https://signalwire.com" rel="noreferrer" target="_blank">https://signalwire.com</a><br>
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.<br>
Build your next product on our scalable cloud platform.<br>
<br>
Join our online community to chat in real time <a href="https://signalwire.community" rel="noreferrer" target="_blank">https://signalwire.community</a><br>
<br>
Professional FreeSWITCH Services<br>
<a href="mailto:sales@freeswitch.com" target="_blank">sales@freeswitch.com</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="https://freeswitch.com/oss" rel="noreferrer" target="_blank">https://freeswitch.com/oss</a><br>
<a href="https://freeswitch.org/confluence" rel="noreferrer" target="_blank">https://freeswitch.org/confluence</a><br>
<a href="https://cluecon.com" rel="noreferrer" target="_blank">https://cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a></blockquote></div></div>