Date: Wednesday, January 25, 2023 @ 18:04:18 Author: eworm Revision: 467356
upgpkg: openvpn 2.6.0-1: new upstream release Modified: openvpn/trunk/0001-unprivileged.patch openvpn/trunk/PKGBUILD -------------------------+ 0001-unprivileged.patch | 12 ++++++------ PKGBUILD | 8 ++++---- 2 files changed, 10 insertions(+), 10 deletions(-) Modified: 0001-unprivileged.patch =================================================================== --- 0001-unprivileged.patch 2023-01-25 17:51:24 UTC (rev 467355) +++ 0001-unprivileged.patch 2023-01-25 18:04:18 UTC (rev 467356) @@ -1,5 +1,5 @@ diff --git a/distro/systemd/[email protected] b/distro/systemd/[email protected] -index cbcef653..71aa1335 100644 +index 159fb4dc..2277a7d9 100644 --- a/distro/systemd/[email protected] +++ b/distro/systemd/[email protected] @@ -11,6 +11,9 @@ Type=notify @@ -8,12 +8,12 @@ ExecStart=@sbindir@/openvpn --suppress-timestamps --nobind --config %i.conf +User=openvpn +Group=network -+AmbientCapabilities=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE - CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE ++AmbientCapabilities=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_SYS_CHROOT CAP_DAC_OVERRIDE + CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10 DeviceAllow=/dev/null rw diff --git a/distro/systemd/[email protected] b/distro/systemd/[email protected] -index d1cc72cb..691f369e 100644 +index 6e8e7d94..b2814e4b 100644 --- a/distro/systemd/[email protected] +++ b/distro/systemd/[email protected] @@ -11,6 +11,9 @@ Type=notify @@ -22,7 +22,7 @@ ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf +User=openvpn +Group=network -+AmbientCapabilities=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE - CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE ++AmbientCapabilities=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE + CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SETPCAP CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE LimitNPROC=10 DeviceAllow=/dev/null rw Modified: PKGBUILD =================================================================== --- PKGBUILD 2023-01-25 17:51:24 UTC (rev 467355) +++ PKGBUILD 2023-01-25 18:04:18 UTC (rev 467356) @@ -1,9 +1,9 @@ # Maintainer: Christian Hesse <[email protected]> pkgname=openvpn -_tag='9c08cfacc470152e8ac2a774713c6fc1d8683e27' # git rev-parse v${pkgver} -pkgver=2.5.8 -pkgrel=2 +_tag='942bc8b43367e97fbc5efb53a8780eac4e09863c' # git rev-parse v${pkgver} +pkgver=2.6.0 +pkgrel=1 pkgdesc='An easy-to-use, robust and highly configurable VPN (Virtual Private Network)' arch=('x86_64') url='https://openvpn.net/index.php/open-source.html' @@ -20,7 +20,7 @@ 'sysusers.conf' 'tmpfiles.conf') sha256sums=('SKIP' - '8e7d292514f30729bc37d6681789b1bfdf87a992a3aa77e2a28b8da9cd8d4bfe' + '77874824d96c1fd6c14259a6ea16232ae574dda3d5adba1798ccd6c93694846c' '3646b865ac67783fafc6652589cfe2a3105ecef06f3907f33de5135815f6a621' 'b1436f953a4f1be7083711d11928a9924993f940ff56ff92d288d6100df673fc')
