From 995749a9753a58e523ad1dd1ad1785181de365a2 Mon Sep 17 00:00:00 2001 From: Sunil Mohan Adapa Date: Fri, 22 Sep 2023 11:38:36 -0700 Subject: [PATCH] wordpress: Use absolute path in service file This is the recommended approach. On Debian, php is usually resolved to /usr/bin/php. Tests: - Tests with absolute path in service file were performed as part of testing done in https://salsa.debian.org/freedombox-team/freedombox/-/issues/2373 . No separate testing was done. Signed-off-by: Sunil Mohan Adapa Reviewed-by: James Valleroy --- .../data/usr/lib/systemd/system/wordpress-freedombox.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plinth/modules/wordpress/data/usr/lib/systemd/system/wordpress-freedombox.service b/plinth/modules/wordpress/data/usr/lib/systemd/system/wordpress-freedombox.service index b7bcdaf72..0cb51d2e2 100644 --- a/plinth/modules/wordpress/data/usr/lib/systemd/system/wordpress-freedombox.service +++ b/plinth/modules/wordpress/data/usr/lib/systemd/system/wordpress-freedombox.service @@ -8,7 +8,7 @@ ConditionPathExists=/etc/wordpress/config-default.php [Service] CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_CHOWN CAP_FSETID CAP_SETFCAP CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_IPC_OWNER CAP_NET_ADMIN CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE CAP_KILL CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_LINUX_IMMUTABLE CAP_IPC_LOCK CAP_SYS_CHROOT CAP_BLOCK_SUSPEND CAP_LEASE CAP_SYS_PACCT CAP_SYS_TTY_CONFIG CAP_SYS_BOOT CAP_MAC_ADMIN CAP_MAC_OVERRIDE CAP_SYS_NICE CAP_SYS_RESOURCE DevicePolicy=closed -ExecStart=php --file /usr/share/wordpress/wp-cron.php +ExecStart=/usr/bin/php --file /usr/share/wordpress/wp-cron.php Group=www-data LockPersonality=yes NoNewPrivileges=yes