{"push_id":805550344,"size":3,"distinct_size":3,"ref":"refs/heads/wip-rgw-drop-permissions-1","head":"93438bbfd84a03223c74616ae44b6e2c05e69053","before":"21610281110f3d72f14612280a7126c30078e756","commits":[{"sha":"ddba1f51ca6ca957928a6d4418cb97614161bbe8","author":{"email":"09ed885098ae6acc18572c714d01318744386c23@suse.com","name":"Karol Mroz"},"message":"common: add rgw_run_as_user_option with default wwwrun\n\nSigned-off-by: Karol Mroz <kmroz@suse.com>","distinct":true,"url":"https://api.github.com/repos/kmroz/ceph/commits/ddba1f51ca6ca957928a6d4418cb97614161bbe8"},{"sha":"8a5f0d68750be5fdd5d2a6ad7cfb1a474fb87172","author":{"email":"09ed885098ae6acc18572c714d01318744386c23@suse.com","name":"Karol Mroz"},"message":"rgw: set user id and instruct civetweb to drop permissions\n\nIf rgw_run_as_user = \"some_user\" is specified for radosgw in ceph.conf,\ncivetweb will now drop permissions (uid/gid by way of password struct)\nto \"some_user\" after startup. If unspecified, \"wwwrun\" will be set as\nthe default user.\n\nAllows for starting civetweb under privileged port numbers (bnc#943471).\n\nSigned-off-by: Karol Mroz <kmroz@suse.com>","distinct":true,"url":"https://api.github.com/repos/kmroz/ceph/commits/8a5f0d68750be5fdd5d2a6ad7cfb1a474fb87172"},{"sha":"93438bbfd84a03223c74616ae44b6e2c05e69053","author":{"email":"09ed885098ae6acc18572c714d01318744386c23@suse.com","name":"Karol Mroz"},"message":"systemd: set radosgw user to root\n\nPermissions of radosgw/civetweb will be dropped later to \"wwwrun\" by\ndefault, or to the user name set in the ceph.conf:rgw_run_as_user option.\nThis will allow civetweb to bind to privileged ports (bnc#943471).\n\nSigned-off-by: Karol Mroz <kmroz@suse.com>","distinct":true,"url":"https://api.github.com/repos/kmroz/ceph/commits/93438bbfd84a03223c74616ae44b6e2c05e69053"}]}