Cleanup postinst to avoid recursive chown of database

[onak.git] / debian / postinst

diff --git a/debian/postinst b/debian/postinst
index 22d44dd80ac2a1aed4f7318c4970df97a8c97f25..b5d02ac6e53ed17d5d9caa7835f1345c60aeec04 100644 (file)
--- a/debian/postinst
+++ b/debian/postinst
@@ -19,6 +19,14 @@ if [ "$1" = "configure" ]; then
     # Add the onak user
     adduser --system --home /var/lib/onak --no-create-home --disabled-login onak
 
+    # Take ownership of the database and spool directory
+    chown onak /var/lib/onak
+    chown onak /var/spool/onak
+
+    # Create our logfile
+    touch /var/log/onak.log
+    chown onak /var/log/onak.log
+
     #
     # If we're using a default config and there's no onak database, create it
     # by adding my key.
@@ -27,17 +35,9 @@ if [ "$1" = "configure" ]; then
             grep -q "^location=/var/lib/onak" /etc/onak.ini &&
             [ ! -e /var/lib/onak/num_keydb -a \
                 -e /usr/share/doc/onak/noodles.key.gz ]; then
-        zcat /usr/share/doc/onak/noodles.key | onak -b add
+        zcat /usr/share/doc/onak/noodles.key | runuser -u onak -- onak -b add
     fi
 
-    # Take ownership of the database and spool directory
-    chown -R onak /var/lib/onak
-    chown -R onak /var/spool/onak
-
-    # Create our logfile
-    touch /var/log/onak.log
-    chown onak /var/log/onak.log
-
     # Make the CGI tools setuid onak
     for i in /usr/lib/cgi-bin/pks/*
     do