Date: Tuesday, November 21, 2017 @ 18:25:49 Author: anthraxx Revision: 267833
upgpkg: kibana 6.0.0-3 (improve security etc dirmode + systemd service) Modified: kibana/trunk/PKGBUILD kibana/trunk/kibana.service kibana/trunk/tmpfile.conf ----------------+ PKGBUILD | 6 +++--- kibana.service | 5 ++++- tmpfile.conf | 4 ++-- 3 files changed, 9 insertions(+), 6 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2017-11-21 17:51:40 UTC (rev 267832) +++ PKGBUILD 2017-11-21 18:25:49 UTC (rev 267833) @@ -4,7 +4,7 @@ pkgname=kibana pkgver=6.0.0 -pkgrel=2 +pkgrel=3 pkgdesc='Browser based analytics and search dashboard for Elasticsearch' url='https://www.elastic.co/products/kibana' arch=('any') @@ -18,8 +18,8 @@ tmpfile.conf user.conf) sha512sums=('dd1ea5f344fe31da49ed56c844d3c0792f7ef748fc8b43450c611e7eb7f44b7cde8ae1b98c3ebfec7a87090fe82dab49b2176e947aad13d72176ec609f8a79c6' - '68b5104ab57942c4a443fddb34ed8ef06659a8af9ab0db76193aad6ac4c4f9857d8fb07368cfab042c8aac9dd96222500d4da83067787e77a3964df094bba28b' - 'f874a2f546b7bdc8c910ce92abc39b5605b74fbaf544197033d9bbec6b27f4e4dbdce6d39836608c489ec03c485344f4d8416ee062da2bb3ade9e82563173e8a' + '3216c2864cf184cea0883677a05bf83cf396fda52dbd3d9a187de22f0c45d13db58f8fb4dc926694ba7d7a24000cf6d5f6218805f74fb5d729fc85c643ca8f2f' + '8571f0b0ec8a55dfcba8298c6f1b1895be3c6e3dad524633411615dd3ad2f73af11a94e0a74fd296a784d6c779df8e9ce0a9f7b3e0182adde221a67293f4adeb' '9085884430c656cc68b855c3d6740e5fd0854a8785930341b29e15e201deacc1870d8223255d9ebe096cb111319bea9bf4faa03d0760d5819976ebf912221c7d') prepare() { Modified: kibana.service =================================================================== --- kibana.service 2017-11-21 17:51:40 UTC (rev 267832) +++ kibana.service 2017-11-21 18:25:49 UTC (rev 267833) @@ -1,6 +1,6 @@ [Unit] Description=Kibana - dashboard for Elasticsearch -After=elasticsearch.service +After=network.target elasticsearch.service [Service] User=kibana @@ -7,6 +7,9 @@ Group=kibana Environment="NODE_ENV=production" ExecStart=/usr/bin/node --max-old-space-size=512 /usr/share/kibana/src/cli --config=/etc/kibana/kibana.yml +PrivateTmp=true +NoNewPrivileges=true +Restart=always [Install] WantedBy=multi-user.target Modified: tmpfile.conf =================================================================== --- tmpfile.conf 2017-11-21 17:51:40 UTC (rev 267832) +++ tmpfile.conf 2017-11-21 18:25:49 UTC (rev 267833) @@ -1,5 +1,5 @@ -d /etc/kibana 0755 kibana kibana - +d /etc/kibana 0750 kibana kibana - +z /etc/kibana/kibana.yml 0640 kibana kibana - d /usr/share/kibana 0755 kibana kibana - -z /etc/kibana/kibana.yml - kibana kibana - Z /usr/share/kibana/optimize - kibana kibana - Z /usr/share/kibana/data - kibana kibana -