Re: [uWSGI] why uwsgi invokes /bin/bash

[Michael Ströder]

On 8/8/18 6:41 PM, Damjan Georgievski wrote:

but without either the uwsgi
.ini file or the systemd service file it's hard to tell what you're
seeing

See below.

Ciao, Michael.

#---------------------------------------------------------------------------
# uwsgi config for web2ldap service
# Ansible managed: ae-dir/master
#---------------------------------------------------------------------------
[uwsgi]
socket = /opt/ae-dir/run/uwsgi/web2ldap/web2ldap.sock
chmod-socket = 666
chdir = /opt/ae-dir/run/uwsgi/web2ldap
module = web2ldap.wsgi:application
stats = 127.0.0.1:9091
manage-script-name = true
master = false
processes = 1
threads = 10
enable-threads = true
buffer-size = 16384
harakiri = 20
plugin = python


#-----------------------------------------------------------------------
# initiate:   systemctl enable web2ldap.service
# start:      systemctl start web2ldap.service
# get status: systemctl status web2ldap.service
#
# Ansible managed: ae-dir/master
#-----------------------------------------------------------------------

[Unit]
Description=web2ldap
Requires=network.target local-fs.target remote-fs.target
After=local-fs.target remote-fs.target network.target

[Service]
Type=simple
Environment=LDAPNOINIT=1
Environment=PYTHONOPTIMIZE=2
Environment=PYTHONDONTWRITEBYTECODE=1
ExecStart=/usr/sbin/uwsgi --ini /opt/ae-dir/etc/uwsgi/web2ldap.ini
User=ae-dir-web2ldap
Group=ae-dir-web2ldap
Restart=always
KillSignal=SIGQUIT
Type=notify
StandardError=syslog
# various hardening options
PrivateTmp=yes
ProtectSystem=full
ProtectHome=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
NoNewPrivileges=yes
MountFlags=private
SystemCallArchitectures=native
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
PrivateDevices=yes
LockPersonality=yes
RestrictRealtime=yes
AppArmorProfile=web2ldap

[Install]
WantedBy=multi-user.target

log-format = %(addr) - %(user) [%(ltime)] "%(method) %(uri) %(proto)" %(status) %(size) "%(referer)" "%(uagent)"

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
uWSGI mailing list
uWSGI@lists.unbit.it
http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi