diff options
author | Mark Wagie | 2021-06-12 11:49:54 -0600 |
---|---|---|
committer | Mark Wagie | 2021-06-12 11:49:54 -0600 |
commit | ca42a3194f930ff6f4ac777393daa9bc03a0dc7f (patch) | |
tree | e6eaf0911e2e5ba27f3e788cc3d31038139c983f | |
parent | c58a526f6d4f7eb07a9dfb8e5bec3ae1b8b125aa (diff) | |
download | aur-ca42a3194f930ff6f4ac777393daa9bc03a0dc7f.tar.gz |
restrict management socket access to wheel group
-rw-r--r-- | .SRCINFO | 3 | ||||
-rw-r--r-- | PKGBUILD | 18 |
2 files changed, 12 insertions, 9 deletions
@@ -1,7 +1,7 @@ pkgbase = mullvad-vpn-beta pkgdesc = The Mullvad VPN client app for desktop (beta channel) pkgver = 2021.4.beta1 - pkgrel = 1 + pkgrel = 2 url = https://www.mullvad.net install = mullvad-vpn.install arch = x86_64 @@ -27,4 +27,3 @@ pkgbase = mullvad-vpn-beta sha256sums = a59c29f07b4eab9af56f0e8be42bae0d83726f5185e88de0c5a48f4098c3c0a4 pkgname = mullvad-vpn-beta - @@ -8,7 +8,7 @@ pkgname=mullvad-vpn-beta _pkgver=2021.4 _channel=beta pkgver=${_pkgver}.${_channel}1 -pkgrel=1 +pkgrel=2 pkgdesc="The Mullvad VPN client app for desktop (beta channel)" url="https://www.mullvad.net" arch=('x86_64') @@ -28,9 +28,9 @@ sha256sums=('SKIP' 'SKIP' 'a59c29f07b4eab9af56f0e8be42bae0d83726f5185e88de0c5a48f4098c3c0a4') validpgpkeys=('EA0A77BF9E115615FC3BD8BC7653B940E494FE87') - # Linus Färnstrand (code signing key) <linus at mullvad dot net> + # Linus Färnstrand (code signing key) <linus@mullvad.net> # '8339C7D2942EB854E3F27CE5AEE9DECFD582E984') - # David Lönnhager (code signing) <david dot l at mullvad dot net> + # David Lönnhager (code signing) <david.l@mullvad.net> _ensure_local_nvm() { # lets be sure we are starting clean @@ -158,8 +158,13 @@ package() { install -d "$pkgdir/opt/Mullvad VPN" cp -r dist/linux-unpacked/* "$pkgdir/opt/Mullvad VPN" - # Install daemon service - install -Dm644 dist/linux-unpacked/resources/mullvad-daemon.service -t \ + # Restrict management socket access to wheel group + sed -i '/\[Service\]/a Environment="MULLVAD_MANAGEMENT_SOCKET_GROUP=wheel"' \ + "$pkgdir/opt/Mullvad VPN/resources/mullvad-daemon.service" + + # Symlink daemon service to correct directory + install -d "$pkgdir/usr/lib/systemd/system" + ln -s "/opt/Mullvad VPN/resources/mullvad-daemon.service" \ "$pkgdir/usr/lib/systemd/system" # Install binaries @@ -189,7 +194,6 @@ package() { for icon_size in 16 32 48 64 128 256 512 1024; do icons_dir=usr/share/icons/hicolor/${icon_size}x${icon_size}/apps - install -d $pkgdir/$icons_dir - install -m644 $icons_dir/${pkgname%-beta}.png -t $pkgdir/$icons_dir + install -Dm644 $icons_dir/${pkgname%-beta}.png -t $pkgdir/$icons_dir done } |