Date: Thursday, January 31, 2019 @ 15:20:00 Author: archange Revision: 428740
upgpkg: matterbridge 1.13.0-1 Modified: matterbridge/trunk/PKGBUILD matterbridge/trunk/matterbridge.service ----------------------+ PKGBUILD | 12 +++++++++--- matterbridge.service | 19 +++++++++++++++++-- 2 files changed, 26 insertions(+), 5 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2019-01-31 15:19:32 UTC (rev 428739) +++ PKGBUILD 2019-01-31 15:20:00 UTC (rev 428740) @@ -1,7 +1,7 @@ # Maintainer: Bruno Pagani <[email protected]> pkgname=matterbridge -pkgver=1.12.3 +pkgver=1.13.0 pkgrel=1 pkgdesc="Multi-protocols (IRC/XMPP/Mattermost/Slack/Matrix/etc) bridge" arch=('x86_64') @@ -13,11 +13,17 @@ source=(${pkgname}-${pkgver}.tar.gz::"${url}/archive/v${pkgver}.tar.gz" ${pkgname}-${pkgver}.tar.gz.asc::"${url}/releases/download/v${pkgver}/v${pkgver}.tar.gz.asc" 'matterbridge.service') -sha256sums=('240a76ea0c6d1cd4e671edf2684a606d052236e1140ce3c45582831f01d3ae12' +sha256sums=('6f66b562035d2cf1f9bb9fe2cacb36327326bb483673c4ddf8a2c7438b2487c9' 'SKIP' - 'afb424b918f7108f5efae39afbed5d23d9a2c36710c6e0adbb96c7e5c7835aa3') + '89e52388054d3c83199ccbfe8f2dc02a6ae02ec1a2d024460b11464324a1fb9b') validpgpkeys=('CC7D978417C1AEA1E4CDD7240E41AB4BF4C610B4') # wim <[email protected]> +prepare() { + cd ${pkgname}-${pkgver} + # https://github.com/golang/go/issues/29278 + sed -i 's:9PfxPUmasKzeJor9uQTaXLT6WUG/r+vSTmvXxvv3JO4:Y3vG4kINVWNQN8Y6Jdur8uLat7fSLV5n5yLE8n+JbF4:' go.sum +} + build() { cd ${pkgname}-${pkgver} go build -v \ Modified: matterbridge.service =================================================================== --- matterbridge.service 2019-01-31 15:19:32 UTC (rev 428739) +++ matterbridge.service 2019-01-31 15:20:00 UTC (rev 428740) @@ -3,10 +3,25 @@ After=network.target [Service] -User=nobody -Group=nobody +User=matterbridge +DynamicUser=yes ExecStart=/usr/bin/matterbridge -conf /etc/matterbridge.toml Type=simple +CapabilityBoundingSet= +NoNewPrivileges=True +PrivateUsers=true +PrivateDevices=true +PrivateTmp=true +ProtectHome=true +ProtectSystem=strict +ProtectControlGroups=yes +ProtectKernelTunables=true +ProtectKernelModules=yes +LockPersonality=true +MemoryDenyWriteExecute=true +RestrictRealtime=true +SystemCallArchitectures=native +SystemCallFilter=@system-service [Install] WantedBy=multi-user.target
