Comment # 4 on bug 1069499 from Miguel Armas

(In reply to Jochen Breuer from comment #3)
> (In reply to Miguel Armas from comment #1)
> > BTW, it can be fixed just setting "user: salt" in /etc/salt/master and
> > restarting the salt-master services
> 
> Thanks for the hint Miguel! Judging from the systemd init scripts and the
> salt-master config, salt-api is started with the user "salt" and salt-master
> with user "root". Is that consistent with your observations?

Yes, that's exactly the problem. I proposed changing the master config because
it's less intrusive, but I guess a cleaner solution would be change unit files
so both services are run as user salt