Run bosh-enable-monit-access as vcap if called by root

mariash · mariash · commit 93677e1fc5cf · 2026-02-27T22:00:41.000Z
Rules for root are already set by bosh agent. Set for vcap user for
backwards compatiblity with old releases
diff --git a/stemcell_builder/stages/bosh_monit/assets/monit-access-helper.sh b/stemcell_builder/stages/bosh_monit/assets/monit-access-helper.sh
@@ -1,3 +1,7 @@
 permit_monit_access() {
-  /var/vcap/bosh/etc/bosh-enable-monit-access
+  if [ "$(id -u)" -eq 0 ]; then
+    sudo -u vcap /var/vcap/bosh/etc/bosh-enable-monit-access
+  else
+    /var/vcap/bosh/etc/bosh-enable-monit-access
+  fi
 }

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,7 @@`
`1`	`1`	`permit_monit_access() {`
`2`		`- /var/vcap/bosh/etc/bosh-enable-monit-access`
	`2`	`+ if [ "$(id -u)" -eq 0 ]; then`
	`3`	`+ sudo -u vcap /var/vcap/bosh/etc/bosh-enable-monit-access`
	`4`	`+ else`
	`5`	`+ /var/vcap/bosh/etc/bosh-enable-monit-access`
	`6`	`+ fi`
`3`	`7`	`}`