diff options
| author | Mark Wagie | 2021-06-12 11:50:20 -0600 |
|---|---|---|
| committer | Mark Wagie | 2021-06-12 11:50:20 -0600 |
| commit | fe5bd30d46bf251bd3ecdead9d05038e0ca7e0df (patch) | |
| tree | 042599e259f44fd7f2e66ee71b0841a7912816d5 | |
| parent | f73d099a52fd3f217173c919e52602c17e55248e (diff) | |
| download | aur-fe5bd30d46bf251bd3ecdead9d05038e0ca7e0df.tar.gz | |
restrict management socket access to wheel group
| -rw-r--r-- | .SRCINFO | 2 | ||||
| -rw-r--r-- | PKGBUILD | 16 |
2 files changed, 12 insertions, 6 deletions
@@ -1,7 +1,7 @@ pkgbase = mullvad-vpn-beta-bin pkgdesc = The Mullvad VPN client app for desktop (beta channel) pkgver = 2021.4.beta1 - pkgrel = 2 + pkgrel = 3 url = https://www.mullvad.net install = mullvad-vpn.install arch = x86_64 @@ -3,7 +3,7 @@ pkgname=mullvad-vpn-beta-bin _pkgver=2021.4 _channel=beta pkgver=${_pkgver}.${_channel}1 -pkgrel=2 +pkgrel=3 pkgdesc="The Mullvad VPN client app for desktop (beta channel)" url="https://www.mullvad.net" arch=('x86_64') @@ -18,7 +18,7 @@ source=("https://github.com/mullvad/mullvadvpn-app/releases/download/${_pkgver}- sha256sums=('ba7705c4e303a35aa2c0d107f960105a51c60662b047b8641efcdcbf15d830bc' 'SKIP' 'a59c29f07b4eab9af56f0e8be42bae0d83726f5185e88de0c5a48f4098c3c0a4') -validpgpkeys=('A1198702FC3E0A09A9AE5B75D5A1D4F266DE8DDF') # Mullvad (code signing) <admin at mullvad dot net> +validpgpkeys=('A1198702FC3E0A09A9AE5B75D5A1D4F266DE8DDF') # Mullvad (code signing) <admin@mullvad.net> package() { bsdtar -xvf data.tar.xz -C "$pkgdir" @@ -26,10 +26,16 @@ package() { # Link to the GUI binary install -m755 "$srcdir/${pkgname%-*-*}.sh" "$pkgdir/usr/bin/${pkgname%-*-*}" - # Install daemon service - install -Dm644 "$pkgdir/opt/Mullvad VPN/resources/mullvad-daemon.service" \ - "$pkgdir/usr/lib/systemd/system/mullvad-daemon.service" + # Restrict management socket access to wheel group + sed -i '/\[Service\]/a Environment="MULLVAD_MANAGEMENT_SOCKET_GROUP=wheel"' \ + "$pkgdir/opt/Mullvad VPN/resources/mullvad-daemon.service" + # Symlink daemon service to correct directory + install -d "$pkgdir/usr/lib/systemd/system" + ln -s "/opt/Mullvad VPN/resources/mullvad-daemon.service" \ + "$pkgdir/usr/lib/systemd/system" + + # Move ZSH completions to correct directory mv "$pkgdir/usr/local/share/zsh" "$pkgdir/usr/share" rm -rf "$pkgdir/usr/local" } |