bug#38438: Fcgiwrap service has no supplementary groups

On Wed, Dec 04, 2019 at 11:22:13AM +0100, pelzflorian (Florian Pelz) wrote: > I had hoped the attached quick hack would fix my issue when testing The now attached patch works now (after doing `usermod -aG git fcgiwrap`, `herd stop fcgiwrap` and `herd start fcgiwrap`). Regards, Florian >From

bug#38438: Fcgiwrap service has no supplementary groups

I had hoped the attached quick hack would fix my issue when testing with the attached vm-image config from . That is, I wanted it to suffice to set Gitolite’s umask to #o0027 as described in the manual instead of #o0022, after I

bug#38438: Fcgiwrap service has no supplementary groups

Fcgiwrap should be started with the supplementary groups of its user. Shepherd’s make-forkexec-constructor does not currently appear to support this. Upstream fcgiwrap ships with a systemd service with the User= setting. Systemd confers this user’s supplementary groups by default: