* Mathias Behrle: " [tryton-debian] Bug#847436: Bug#847436: tryton-server:
Upgrade does not work without tryton-modules-webdav" (Thu, 8 Dec 2016
16:32:19 +0100):
> > BTW, the NEWS.Debian should really instruct the user to run the upgrade
> > with the rights of the tryton user (it suggests root since the command
> > line starts with "#")
>
> Agreed.
Now remembering the reason why this has to be done as root:
The tryton user has no shell (like all other well configured daemons). It could
be changed to /bin/nologin, but with no effect for this problem.
I am not aware of a way to bypass /etc/passwd and to use temporarily another
shell (and this probably is exactly as it should be;)). The shell could be
changed by chsh for the time of the maintenance tasks, but it would have to be
reset afterwards. For me the risk of forgetting to reset the shell is bigger
than to do the commands as root (which I admit has the downside of inadvertently
setting root permissions on log files if the user defines a logging
configuration, but I expect the latter to be a very special mishap) and thus
will keep the shell as before and use the root command line in the docs as
before.
If you have a better solution please let me know.
--
Mathias Behrle
PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
AC29 7E5C 46B9 D0B6 1C71 7681 D6D0 9BE4 8405 BBF6
