[PATCH 07/13] img/app: wireplumber: run as non-root

Alyssa Ross
2025-11-26T21:34:39Z

Signed-off-by: Alyssa Ross <hi@alyssa.is>
---
img/app/image/etc/group | 1 +
img/app/image/etc/passwd | 1 +
img/app/image/etc/s6-rc/wireplumber/run | 3 +++
3 files changed, 5 insertions(+)

diff --git a/img/app/image/etc/group b/img/app/image/etc/group
index 4add88f..5eafb82 100644
--- a/img/app/image/etc/group
+++ b/img/app/image/etc/group
@@ -1 +1,2 @@
wayland:x:1:wayland
+wireplumber:x:2:wireplumber
diff --git a/img/app/image/etc/passwd b/img/app/image/etc/passwd
index 31e5773..5557240 100644
--- a/img/app/image/etc/passwd
+++ b/img/app/image/etc/passwd
@@ -1,2 +1,3 @@
root:x:0:0:System administrator:/run/root:/bin/sh
wayland:x:1:1:wayland-proxy-virtwl service user:/:/usr/bin/nologin
+wireplumber:x:2:2:WirePlumber service user:/:/usr/bin/nologin
diff --git a/img/app/image/etc/s6-rc/wireplumber/run b/img/app/image/etc/s6-rc/wireplumber/run
index d58f197..a514c40 100644
--- a/img/app/image/etc/s6-rc/wireplumber/run
+++ b/img/app/image/etc/s6-rc/wireplumber/run
@@ -1,4 +1,7 @@
#!/bin/execlineb -P
# SPDX-License-Identifier: EUPL-1.2+
# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour@gmail.com>
+
+s6-setuidgid wireplumber
+
wireplumber --profile spectrum
--
2.51.0