rustdesk-server: run as unprivileged user

Signed-off-by: Tianling Shen <[email protected]>

net/rustdesk-server/Makefile

@@ -6,7 +6,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=rustdesk-server
 PKG_VERSION:=1.1.12
-PKG_RELEASE:=2
+PKG_RELEASE:=3
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://codeload.github.com/rustdesk/rustdesk-server/tar.gz/$(PKG_VERSION)?
@@ -28,6 +28,7 @@ define Package/rustdesk-server
   TITLE:=RustDesk Server Program
   DEPENDS:=@(aarch64||arm||x86_64) @(!arm||TARGET_bcm53xx||HAS_FPU)
   URL:=https://rustdesk.com/server
+  USERID:=rustdesk-server:rustdesk-server
 endef
 
 define Package/rustdesk-server/description

net/rustdesk-server/files/rustdesk-server.init

@@ -21,10 +21,11 @@ start_service() {
 
 	[ "$hbbr_enabled" -eq "1" ] || [ "$hbbs_enabled" -eq "1" ] || return 1
 
-	mkdir -p "$WORKDIR" || {
+	if [ ! -d "$WORKDIR" ] && ! mkdir -p "$WORKDIR"; then
 		logger -p daemon.error -t "rustdesk-server" "Failed to create working directory: $WORKDIR"
 		return 1
-	}
+	fi
+	chown -R rustdesk-server:rustdesk-server "$WORKDIR"
 
 	if [ "$hbbr_enabled" -eq "1" ]; then
 		if [ "$web_client" -eq "0" ]; then
@@ -36,6 +37,9 @@ start_service() {
 		procd_open_instance "hbbr"
 		procd_set_param command sh -c "cd $WORKDIR && /usr/bin/hbbr -p ${hbbr_port}"
 		procd_set_param respawn
+		procd_set_param user rustdesk-server
+		procd_set_param group rustdesk-server
+
 		if [ "$auto_fw" -eq "1" ]; then
 			procd_open_data
 			json_add_array firewall
@@ -64,6 +68,9 @@ start_service() {
 		procd_open_instance "hbbs"
 		procd_set_param command sh -c "cd $WORKDIR && /usr/bin/hbbs -p ${hbbs_port}"
 		procd_set_param respawn
+		procd_set_param user rustdesk-server
+		procd_set_param group rustdesk-server
+
 		if [ "$auto_fw" -eq "1" ]; then
 			procd_open_data
 			json_add_array firewall