systemd/docker-engine.socket: use SocketGroup docker

Group authority is granted to the socket, making it easier to manage.

Change-Id: Ib53a7d4f2e5841eac863eb20b0cda43593b69d8e

diff --git a/packaging/docker-engine.spec b/packaging/docker-engine.spec
index 2c65d58..a5af8dd 100644 (file)
--- a/packaging/docker-engine.spec
+++ b/packaging/docker-engine.spec
@@ -59,6 +59,9 @@ install -m 0644 systemd/%{name}.socket %{buildroot}%{_unitdir}/%{name}.socket
 %install_service multi-user.target.wants %{name}.service
 %install_service sockets.target.wants %{name}.socket
 
+%pre
+getent group docker > /dev/null 2>&1 || %{_sbindir}/groupadd -r docker 2>&1 || :
+
 %post
 systemctl daemon-reload
 systemctl restart %{name}.service

diff --git a/systemd/docker-engine.socket b/systemd/docker-engine.socket
index d3d4d13..2f7091b 100644 (file)
--- a/systemd/docker-engine.socket
+++ b/systemd/docker-engine.socket
@@ -7,7 +7,7 @@ Description=Docker Socket for the API
 ListenStream=/run/docker.sock
 SocketMode=0660
 SocketUser=root
-# SocketGroup=docker
+SocketGroup=docker
 SmackLabelIPIn=*
 SmackLabelIPOut=@