summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndy Weidenbaum2018-04-04 17:44:43 -0400
committerAndy Weidenbaum2018-04-04 17:44:43 -0400
commit09ca189130ce151ddb49b732a4d6a7edbd81f023 (patch)
tree3cba6c0eb47b06fe0255dd48d796ff81f4117e96
parente9cf6e968523e8d13efb9f04a72fc95fffe5bcdf (diff)
downloadaur-09ca189130ce151ddb49b732a4d6a7edbd81f023.tar.gz
increment pkgrel; harden *.service
credit: https://github.com/bitcoin/bitcoin/pull/12769
-rw-r--r--.SRCINFO6
-rw-r--r--PKGBUILD8
-rw-r--r--bs-init.service6
-rw-r--r--bs.service6
4 files changed, 19 insertions, 7 deletions
diff --git a/.SRCINFO b/.SRCINFO
index 6d425987f73..220f2eadd3d 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
pkgbase = libbitcoin-server-git
pkgdesc = Bitcoin Full Node and Query Server
pkgver = 20180315
- pkgrel = 1
+ pkgrel = 2
url = https://github.com/libbitcoin/libbitcoin-server
install = bs.install
arch = i686
@@ -43,8 +43,8 @@ pkgbase = libbitcoin-server-git
sha256sums = SKIP
sha256sums = SKIP
sha256sums = a2e4a1d6aaabcec9c57207a7e92b004c2dfa4a2d15c0ecfc05eefbf307783a49
- sha256sums = f110eb59cdd18a8ad0a512604370f912e65b0525e8bb08b463af3e62a920b47d
- sha256sums = 9a9a2286d7c38df7e1942838a19b430e2af6d80324202a117c7ebe2acf50cc80
+ sha256sums = cbcc39723f04b51ed15475fbfb19cf94273db04b3e460f961e5078b40e664cb7
+ sha256sums = 17ff3d0ee3580ccbfdd77b227db27f678aa879c7e6fd30d8748bdb2ca84fd371
pkgname = libbitcoin-server-git
diff --git a/PKGBUILD b/PKGBUILD
index a9ad18a6862..dbe6e15bbc6 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,7 +2,7 @@
pkgname=libbitcoin-server-git
pkgver=20180315
-pkgrel=1
+pkgrel=2
pkgdesc="Bitcoin Full Node and Query Server"
arch=('i686' 'x86_64')
depends=('boost'
@@ -38,8 +38,8 @@ source=(git+https://github.com/libbitcoin/libbitcoin-server
sha256sums=('SKIP'
'SKIP'
'a2e4a1d6aaabcec9c57207a7e92b004c2dfa4a2d15c0ecfc05eefbf307783a49'
- 'f110eb59cdd18a8ad0a512604370f912e65b0525e8bb08b463af3e62a920b47d'
- '9a9a2286d7c38df7e1942838a19b430e2af6d80324202a117c7ebe2acf50cc80')
+ 'cbcc39723f04b51ed15475fbfb19cf94273db04b3e460f961e5078b40e664cb7'
+ '17ff3d0ee3580ccbfdd77b227db27f678aa879c7e6fd30d8748bdb2ca84fd371')
backup=('etc/obelisk/bs/bs.cfg'
'etc/logrotate.d/bs')
provides=('libbitcoin-server')
@@ -64,7 +64,7 @@ prepare() {
-e 's@^directory.*@directory = /srv/obelisk/db@' \
-e 's@^debug_file.*@debug_file = /var/log/obelisk/bs/debug.log@' \
-e 's@^error_file.*@error_file = /var/log/obelisk/bs/error.log@' \
- -e 's@^hosts_file.*@hosts_file = /etc/obelisk/hosts.cache@' \
+ -e 's@^hosts_file.*@hosts_file = /srv/obelisk/hosts.cache@' \
-e 's@^archive_directory.*@archive_directory = /var/log/obelisk/bs@' \
-e 's@^rotation_size.*@rotation_size = 5000000@' \
-e 's@^maximum_archive_size.*@maximum_archive_size = 35000000@' \
diff --git a/bs-init.service b/bs-init.service
index 9c8aa9334b2..70a95df8da7 100644
--- a/bs-init.service
+++ b/bs-init.service
@@ -7,6 +7,12 @@ Type=oneshot
User=obelisk
Group=obelisk
ExecStart=/usr/bin/bs -i /etc/obelisk/bs/bs.cfg
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=full
+SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target
diff --git a/bs.service b/bs.service
index 751baa08158..53c4ea27fd5 100644
--- a/bs.service
+++ b/bs.service
@@ -9,6 +9,12 @@ Group=obelisk
ExecStart=/usr/bin/bs /etc/obelisk/bs/bs.cfg
ExecReload=/usr/bin/kill -s SIGHUP $MAINPID
ExecStop=/usr/bin/kill -s SIGINT $MAINPID
+MemoryDenyWriteExecute=true
+NoNewPrivileges=true
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=full
+SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target