[SOLR-14585] Check the current user in SysV init script

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 8.5.2
• Component/s: scripts and tools
• Labels: sysinit systemd
• Assignee: Unassigned
• Reporter: Roman Kosenko
• Created: 22/Jun/20 10:49
• Updated: 15/Jul/20 15:21

Description

While SOLR-14410 is still open I propose a quick fix/improvement for init.d script - check the current user and, if it is the same as RUNAS user, then don't execute "su".

 

Background:

Systemd has backward compatibility with SysV and able to run scripts from /etc/init.d, but SELinux policies in many distros encourage changing user before this stage and prohibits executing of "su" binary, so it would be logical to do this at systemd level (/etc/systemd/system/solr.service.d/override.conf). In this case, the current init.d script for Solr is missing one very trivial check - `"$RUNAS" != "$USER"`. See the diff-file in the attachment.

 

Pull request: https://github.com/apache/lucene-solr/pull/1627

Issue Links

• relates to: SOLR-10905 Linux install script should move to systemd
• relates to: SOLR-14410 Switch from SysV init script to systemd service definition
• links to: GitHub Pull Request #1627