summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorMark Wagie2021-06-12 11:49:54 -0600
committerMark Wagie2021-06-12 11:49:54 -0600
commitca42a3194f930ff6f4ac777393daa9bc03a0dc7f (patch)
treee6eaf0911e2e5ba27f3e788cc3d31038139c983f
parentc58a526f6d4f7eb07a9dfb8e5bec3ae1b8b125aa (diff)
downloadaur-ca42a3194f930ff6f4ac777393daa9bc03a0dc7f.tar.gz
restrict management socket access to wheel group
-rw-r--r--.SRCINFO3
-rw-r--r--PKGBUILD18
2 files changed, 12 insertions, 9 deletions
diff --git a/.SRCINFO b/.SRCINFO
index f5313dc0743c..419b6715aa08 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
pkgbase = mullvad-vpn-beta
pkgdesc = The Mullvad VPN client app for desktop (beta channel)
pkgver = 2021.4.beta1
- pkgrel = 1
+ pkgrel = 2
url = https://www.mullvad.net
install = mullvad-vpn.install
arch = x86_64
@@ -27,4 +27,3 @@ pkgbase = mullvad-vpn-beta
sha256sums = a59c29f07b4eab9af56f0e8be42bae0d83726f5185e88de0c5a48f4098c3c0a4
pkgname = mullvad-vpn-beta
-
diff --git a/PKGBUILD b/PKGBUILD
index 0071164e7dbe..32fa8dbe4383 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -8,7 +8,7 @@ pkgname=mullvad-vpn-beta
_pkgver=2021.4
_channel=beta
pkgver=${_pkgver}.${_channel}1
-pkgrel=1
+pkgrel=2
pkgdesc="The Mullvad VPN client app for desktop (beta channel)"
url="https://www.mullvad.net"
arch=('x86_64')
@@ -28,9 +28,9 @@ sha256sums=('SKIP'
'SKIP'
'a59c29f07b4eab9af56f0e8be42bae0d83726f5185e88de0c5a48f4098c3c0a4')
validpgpkeys=('EA0A77BF9E115615FC3BD8BC7653B940E494FE87')
- # Linus Färnstrand (code signing key) <linus at mullvad dot net>
+ # Linus Färnstrand (code signing key) <linus@mullvad.net>
# '8339C7D2942EB854E3F27CE5AEE9DECFD582E984')
- # David Lönnhager (code signing) <david dot l at mullvad dot net>
+ # David Lönnhager (code signing) <david.l@mullvad.net>
_ensure_local_nvm() {
# lets be sure we are starting clean
@@ -158,8 +158,13 @@ package() {
install -d "$pkgdir/opt/Mullvad VPN"
cp -r dist/linux-unpacked/* "$pkgdir/opt/Mullvad VPN"
- # Install daemon service
- install -Dm644 dist/linux-unpacked/resources/mullvad-daemon.service -t \
+ # Restrict management socket access to wheel group
+ sed -i '/\[Service\]/a Environment="MULLVAD_MANAGEMENT_SOCKET_GROUP=wheel"' \
+ "$pkgdir/opt/Mullvad VPN/resources/mullvad-daemon.service"
+
+ # Symlink daemon service to correct directory
+ install -d "$pkgdir/usr/lib/systemd/system"
+ ln -s "/opt/Mullvad VPN/resources/mullvad-daemon.service" \
"$pkgdir/usr/lib/systemd/system"
# Install binaries
@@ -189,7 +194,6 @@ package() {
for icon_size in 16 32 48 64 128 256 512 1024; do
icons_dir=usr/share/icons/hicolor/${icon_size}x${icon_size}/apps
- install -d $pkgdir/$icons_dir
- install -m644 $icons_dir/${pkgname%-beta}.png -t $pkgdir/$icons_dir
+ install -Dm644 $icons_dir/${pkgname%-beta}.png -t $pkgdir/$icons_dir
done
}