diff options
| author | Your Name | 2019-02-23 00:59:21 -0500 |
|---|---|---|
| committer | Your Name | 2019-02-23 00:59:21 -0500 |
| commit | d1b579354afef6e0937eb7c6d566578f2e5f57f5 (patch) | |
| tree | 5c9eea34603d73023ac5225df5fb08bfa4ce4c0f | |
| parent | e2f101c296000b091b3eb20ec57b700f5378a53c (diff) | |
| download | aur-d1b579354afef6e0937eb7c6d566578f2e5f57f5.tar.gz | |
CAP_DAC_READ_SEARCH removed
| -rw-r--r-- | .SRCINFO | 4 | ||||
| -rw-r--r-- | PKGBUILD | 2 | ||||
| -rw-r--r-- | tor.install | 4 | ||||
| -rw-r--r-- | tor.service | 4 |
4 files changed, 7 insertions, 7 deletions
@@ -1,3 +1,5 @@ +# Generated by mksrcinfo v8 +# Sat Feb 23 05:59:07 UTC 2019 pkgbase = tor-git pkgdesc = An anonymizing overlay network (development version) pkgver = 0.4.1.0.alpha.r86.g9ac8c85 @@ -33,7 +35,7 @@ pkgbase = tor-git sha256sums = eb82c6eaef6cd2e9451b4096f4ce23b3ee91fc408cdebd3280698cbe1a3b7ca1 sha256sums = 7fbb63e9411eee2176964449a3d6809d16e1120152c6ff201ecea1d1f97f102b sha256sums = d447227fcc2756778a1be143b8975d67b25ea15688cde2291185b3c71d0f6e34 - sha256sums = 7f98569aefffead72e8712c1ad27de3fc2095575da003691b2513ca54042efbb + sha256sums = f83ccec32ce30469bebf906a218cd62e5ec475408d3d30df6b34428616c0d217 sha256sums = ffef89a0eb10614e2350b4271ff83f92caa2301bfb97746b94dc7ab7f21d702b sha256sums = 4282c8a4f1471b3be345b2024491af89f5eeaac071884f2a55988aef94a2054b @@ -37,7 +37,7 @@ sha256sums=('SKIP' 'eb82c6eaef6cd2e9451b4096f4ce23b3ee91fc408cdebd3280698cbe1a3b7ca1' '7fbb63e9411eee2176964449a3d6809d16e1120152c6ff201ecea1d1f97f102b' 'd447227fcc2756778a1be143b8975d67b25ea15688cde2291185b3c71d0f6e34' - '7f98569aefffead72e8712c1ad27de3fc2095575da003691b2513ca54042efbb' + 'f83ccec32ce30469bebf906a218cd62e5ec475408d3d30df6b34428616c0d217' 'ffef89a0eb10614e2350b4271ff83f92caa2301bfb97746b94dc7ab7f21d702b' '4282c8a4f1471b3be345b2024491af89f5eeaac071884f2a55988aef94a2054b') diff --git a/tor.install b/tor.install index 8e8e3b10eda9..caca13a2df57 100644 --- a/tor.install +++ b/tor.install @@ -12,7 +12,3 @@ post_upgrade() { chown -R tor:tor /etc/tor chmod 755 /etc/tor } - -pre_remove() { - echo -} diff --git a/tor.service b/tor.service index 1c2f6980d74d..3e6b17c7c0d0 100644 --- a/tor.service +++ b/tor.service @@ -5,6 +5,7 @@ After=syslog.target network.target nss-lookup.target [Service] Type=notify NotifyAccess=all +Group=tor ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config ExecStart=/usr/bin/tor -f /etc/tor/torrc ExecReload=/bin/kill -HUP ${MAINPID} @@ -19,11 +20,12 @@ PrivateTmp=yes PrivateDevices=yes ProtectHome=yes ProtectSystem=full +ProtectKernelTunables=yes ReadOnlyDirectories=/ ReadWriteDirectories=-/var/lib/tor ReadWriteDirectories=-/var/log/tor NoNewPrivileges=yes -CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH +CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE [Install] WantedBy=multi-user.target |