Date: Wednesday, October 11, 2017 @ 16:21:05 Author: eworm Revision: 307506
upgpkg: rsync 3.1.2-4 * switch to sha256 checksums * link against system zlib * add some systemd security features Modified: rsync/trunk/PKGBUILD rsync/trunk/rsyncd.service rsync/trunk/[email protected] -----------------+ PKGBUILD | 26 +++++++++++++++----------- rsyncd.service | 4 ++++ [email protected] | 4 ++++ 3 files changed, 23 insertions(+), 11 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2017-10-11 16:09:25 UTC (rev 307505) +++ PKGBUILD 2017-10-11 16:21:05 UTC (rev 307506) @@ -2,7 +2,7 @@ pkgname=rsync pkgver=3.1.2 -pkgrel=3 +pkgrel=4 pkgdesc="A file transfer program to keep remote files in sync" arch=('i686' 'x86_64') url="https://rsync.samba.org/"; @@ -9,22 +9,26 @@ license=('GPL3') depends=('perl' 'popt' 'acl' 'zlib') backup=('etc/rsyncd.conf' 'etc/xinetd.d/rsync') +validpgpkeys=('0048C8B026D4C96F0E589C2F6C859FB14B96A8C5') # Wayne Davison <[email protected]> source=("https://rsync.samba.org/ftp/rsync/$pkgname-$pkgver.tar.gz"{,.asc} - 'rsyncd.conf' 'rsync.xinetd' 'rsyncd.service' - 'rsyncd.socket' '[email protected]') -md5sums=('0f758d7e000c0f7f7d3792610fad70cb' - 'SKIP' - 'bce64d122a8e0f86872a4a21a03bc7f3' - 'ea3e9277dc908bc51f9eddc0f6b935c1' - 'f90ba7f3717028769d6f230a2402b5aa' - 'ae4c381e0c02d6132c7f6ded3f473041' - 'ceab0b656e5e8239df594040b3b31d3c') -validpgpkeys=('0048C8B026D4C96F0E589C2F6C859FB14B96A8C5') + 'rsyncd.conf' + 'rsync.xinetd' + 'rsyncd.service' + 'rsyncd.socket' + '[email protected]') +sha256sums=('ecfa62a7fa3c4c18b9eccd8c16eaddee4bd308a76ea50b5c02a5840f09c0a1c2' + 'SKIP' + '733ccb571721433c3a6262c58b658253ca6553bec79c2bdd0011810bb4f2156b' + 'da0ec9ce07bf2edafbc8e44020da29a58038b00c3048a22de57017c56318a767' + 'c6998eaa5f3baa0e02830c182acacbb966187c428f8e42eab087f681f8e3d0a6' + '551f17407de0e539c8419fc2cd48dd0124eb0253a186690b165b51703ffad1a5' + '53e9e2546a74ce622f4eabc5590662fc2d0b06467f71f95428ab7926ea7e24c4') build() { cd "$srcdir/$pkgname-$pkgver" ./configure --prefix=/usr \ --with-included-popt=no \ + --with-included-zlib=no \ --disable-debug make } Modified: rsyncd.service =================================================================== --- rsyncd.service 2017-10-11 16:09:25 UTC (rev 307505) +++ rsyncd.service 2017-10-11 16:21:05 UTC (rev 307506) @@ -5,6 +5,10 @@ [Service] ExecStart=/usr/bin/rsync --daemon --no-detach RestartSec=1 +ProtectSystem=full +ProtectHome=on +PrivateDevices=on +NoNewPrivileges=on [Install] WantedBy=multi-user.target Modified: [email protected] =================================================================== --- [email protected] 2017-10-11 16:09:25 UTC (rev 307505) +++ [email protected] 2017-10-11 16:21:05 UTC (rev 307506) @@ -7,3 +7,7 @@ StandardInput=socket StandardOutput=inherit StandardError=journal +ProtectSystem=full +ProtectHome=on +PrivateDevices=on +NoNewPrivileges=on
