-'captive' account as pre/post-install.

diff --git a/TODO b/TODO
index ed9e725..8d9645f 100644 (file)
--- a/TODO
+++ b/TODO
@@ -8,7 +8,6 @@ Concurrent disk writes may fail on captive_file_write() .Information==num_bytes
 
 Strict ulimit (rlimit) of sandbox child.
 Set direct-write buffers limit for sandbox child.
-'captive' account as pre/post-install.
 syslog(3) GLog reporting.
 
 Better BLKGETSIZE64 vs. BLKGETSIZE run-time availability compatibility.

diff --git a/captive.spec.in b/captive.spec.in
index a79119f..9c37955 100644 (file)
--- a/captive.spec.in
+++ b/captive.spec.in
@@ -131,6 +131,7 @@ rm -rf $RPM_BUILD_ROOT
 
 %post
 /sbin/ldconfig
+/usr/sbin/useradd -c "Captive Sandbox" -s /sbin/nologin -r -d %{_var}/lib/@PACKAGE@ captive 2>/dev/null || true
 
 %postun
 /sbin/ldconfig