feat: dde-api安全整改，优化调整

makefile中入参改用ifneq判断，dde-api安装时创建deepin-daemon用户

Log: dde-api安全整改
PMS: TASK-369021

Author: fly602

Makefile

@@ -143,12 +143,12 @@ install-binary:
 	mkdir -pv ${DESTDIR}${SYSTEMD_SERVICE_DIR}
 	cp -R misc/systemd/system/*.service ${DESTDIR}${SYSTEMD_SERVICE_DIR}
 	# 默认不安装 deepin-locale-helper.service，只有显式开启时才保留
-	if [ "${INSTALL_LOCALE_HELPER}" != "1" ]; then \
-		rm -f ${DESTDIR}${SYSTEMD_SERVICE_DIR}/deepin-locale-helper.service; \
-		rm -f ${DESTDIR}${PREFIX}/share/dbus-1/system-services/org.deepin.dde.LocaleHelper1.service; \
-		rm -f ${DESTDIR}${PREFIX}/share/polkit-1/actions/org.deepin.dde.locale-helper.policy; \
-		rm -f ${DESTDIR}${PREFIX}/share/dbus-1/system.d/org.deepin.dde.LocaleHelper1.conf; \
-	fi
+ifneq ($(INSTALL_LOCALE_HELPER), 1)
+	rm -f ${DESTDIR}${SYSTEMD_SERVICE_DIR}/deepin-locale-helper.service; 
+	rm -f ${DESTDIR}${PREFIX}/share/dbus-1/system-services/org.deepin.dde.LocaleHelper1.service; 
+	rm -f ${DESTDIR}${PREFIX}/share/polkit-1/actions/org.deepin.dde.locale-helper.policy; 
+	rm -f ${DESTDIR}${PREFIX}/share/dbus-1/system.d/org.deepin.dde.LocaleHelper1.conf; 
+endif
 
 	mkdir -pv ${DESTDIR}${PREFIX}/share/icons/hicolor
 	cp -R misc/icons/* ${DESTDIR}${PREFIX}/share/icons/hicolor

debian/rules

@@ -14,6 +14,8 @@ endif
 	dh $@ --buildsystem=makefile
 
 override_dh_auto_install:
+	cp -f misc/sysusers/deepin-daemon.conf debian/deepin-daemon.sysusers
+	dh_installsysusers  --name=deepin-daemon
 	dh_auto_install -- INSTALL_LOCALE_HELPER=1
 
 override_dh_strip:

misc/sysusers/deepin-daemon.conf

@@ -0,0 +1,3 @@
+#Type Name                      ID                  GECOS              Home directory Shell
+u     deepin-daemon             -                   ""                  -              -
+m     deepin-daemon             netdev

rpm/dde-api.spec

@@ -87,18 +87,11 @@ for file in $(find . -iname "*.go" -o -iname "*.c" -o -iname "*.h" -o -iname "*.
     cp -pav $file %{buildroot}/%{gopath}/src/%{goipath}/$file
     echo "%{gopath}/src/%{goipath}/$file" >> devel.file-list
 done
+install -D -m 0644 misc/sysusers/deepin-daemon.conf %{buildroot}%{_sysusersdir}/deepin-daemon.conf
 %make_install SYSTEMD_SERVICE_DIR="%{_unitdir}" LIBDIR="%{_libexecdir}"
 # HOME directory for user deepin-daemon
 mkdir -p %{buildroot}%{_sharedstatedir}/deepin-daemon
 
-%pre
-getent group deepin-daemon >/dev/null || groupadd -r deepin-daemon
-getent passwd deepin-daemon >/dev/null || \
-    useradd -r -g deepin-daemon -d %{_sharedstatedir}/deepin-daemon\
-    -s /sbin/nologin \
-    -c "User of org.deepin.dde.SoundThemePlayer1.service" deepin-daemon
-exit 0
-
 %post
 %systemd_post deepin-shutdown-sound.service
 
@@ -124,6 +117,7 @@ exit 0
 %{_datadir}/polkit-1/actions/org.deepin.dde.device.unblock-bluetooth-devices.policy
 %{_var}/lib/polkit-1/rules.d/org.deepin.dde.device.rules
 %attr(-, deepin-daemon, deepin-daemon) %{_sharedstatedir}/deepin-daemon
+%{_sysusersdir}/deepin-daemon.conf
 
 %files -n %{name}-devel -f devel.file-list