Hello,
I'm trying to create a Linux installation, with a system user (adduser --system ...\... a_software_usr). a_software_usr represents the installed software (my_software's proxy, an abstraction of other real users). Then, I've created a single-user software group named a_software_grp containing a_software_usr. I've installed \ dispatched all the binaries released in /opt/my_software/... . Then, I've added the real users - detected during the installation - inside the group named a_software_grp. I'm using setfacl cmd to manage rights on /opt/my_software/... .
I've then said that the /opt/my_software directory belongs, is owned by a_software_usr:a_software_grp. I, i.e. user01, as a real user (not a system user), also belong to a_software_grp. In other words, I use a_software_grp as a proxy group to manage the rights dispatched into /opt/my_software. And real users who want to run a_software, must be added inside this group.
I've got the following problem: in summary, if the permissions given on /opt/a_software are [rwx rwx rwx] i.e. [777], I can launch a_software from a menu launching itself /usr/share/applications/a_software.desktop. But, if I grant /opt/a_software with a less permissive installation, i.e. if the permissions given on /opt/a_software are [rwx rwx ---] i.e. [770], then I get the message "Desktop file invalid: '/usr/share/applications/a_software.desktop'". Same thing: when I run a_software with [770] rights, from a terminal as @user01 or as @root, I get the message "Gtk-WARNING **: 21:02:36.872: cannot open display: ".
Does someone have a clue \ hint, where to look for the reason of this message?