summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authornekgem22020-11-07 08:14:14 +0000
committernekgem22020-11-07 08:14:14 +0000
commitde00e1be0a19d54b14b94c1fc547defc3701b1ab (patch)
tree69e59afa29ea9112f64897c9ba8090a41a9a2101
parentda5d173cc3c9ea9fd349eed3edd689fca16a8cfb (diff)
downloadaur-de00e1be0a19d54b14b94c1fc547defc3701b1ab.tar.gz
service hardening
-rw-r--r--.SRCINFO4
-rw-r--r--PKGBUILD4
-rw-r--r--lokinet.service8
3 files changed, 12 insertions, 4 deletions
diff --git a/.SRCINFO b/.SRCINFO
index 5c7f367ea8eb..cf60f5f7be56 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
pkgbase = lokinet
pkgdesc = Anonymous, decentralized and IP based overlay network for the internet.
pkgver = 0.8.0
- pkgrel = 5
+ pkgrel = 6
url = https://lokinet.org
install = lokinet.install
arch = x86_64
@@ -28,7 +28,7 @@ pkgbase = lokinet
validpgpkeys = 67EF6BA68E7B0B0D6EB4F7D4F357B3B42F6F9B05
sha256sums = 8eed27bee21bf504d9753b31d0709b59dd268fafcfde9869d773637c8077abf6
sha256sums = SKIP
- sha256sums = 137a9d137329ef333b9d2ffa80fdbdbf7496fd1f22443642539a7bec2bd9309c
+ sha256sums = 3c2fcd2be74a989bdb19383dd3421f7654584b53e4b7e0692b752bfbe60903f4
sha256sums = 66adce25edd3323a3a6d07691bb886800f506944bf4fa0918eb42a033e344384
sha256sums = 21c9bc83f8466ab17fa927561d7f24f930f97c996a8aa0fbbbbb2b65cb97b342
sha256sums = 6ef779170b72856bbb8df40c34a808acffddd156684bdb66a55e71d50cf95841
diff --git a/PKGBUILD b/PKGBUILD
index 321393e50e61..1c2a8b3a8022 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
# Maintainer: nekgem2 <nekgem2@firemail.cc>
pkgname=lokinet
pkgver=0.8.0
-pkgrel=5
+pkgrel=6
pkgdesc="Anonymous, decentralized and IP based overlay network for the internet."
arch=('x86_64' 'aarch64')
url="https://lokinet.org"
@@ -20,7 +20,7 @@ source=("https://github.com/loki-project/loki-network/releases/download/v$pkgver
'lokinet.tmpfiles')
sha256sums=('8eed27bee21bf504d9753b31d0709b59dd268fafcfde9869d773637c8077abf6'
'SKIP'
- '137a9d137329ef333b9d2ffa80fdbdbf7496fd1f22443642539a7bec2bd9309c'
+ '3c2fcd2be74a989bdb19383dd3421f7654584b53e4b7e0692b752bfbe60903f4'
'66adce25edd3323a3a6d07691bb886800f506944bf4fa0918eb42a033e344384'
'21c9bc83f8466ab17fa927561d7f24f930f97c996a8aa0fbbbbb2b65cb97b342'
'6ef779170b72856bbb8df40c34a808acffddd156684bdb66a55e71d50cf95841'
diff --git a/lokinet.service b/lokinet.service
index a6db84e7efad..d8a942043618 100644
--- a/lokinet.service
+++ b/lokinet.service
@@ -20,5 +20,13 @@ Environment=LOKINET_NETID=lokinet
Restart=always
RestartSec=5s
+# Hardening
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=strict
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ReadWritePaths=/var/lib/lokinet
+
[Install]
WantedBy=multi-user.target