diff options
author | Andy Weidenbaum | 2018-04-04 17:44:38 -0400 |
---|---|---|
committer | Andy Weidenbaum | 2018-04-04 17:44:38 -0400 |
commit | d7bd5338619dbe5add20674d3ff9c1c35d8eb3a8 (patch) | |
tree | 46b44676ef12084194c760596ecb616e690b2eb9 | |
parent | 222bf7aa40f7719c080f4544405da7ce5513dd64 (diff) | |
download | aur-d7bd5338619dbe5add20674d3ff9c1c35d8eb3a8.tar.gz |
increment pkgrel; harden *.service
credit: https://github.com/bitcoin/bitcoin/pull/12769
-rw-r--r-- | .SRCINFO | 6 | ||||
-rw-r--r-- | PKGBUILD | 8 | ||||
-rw-r--r-- | bn-init.service | 6 | ||||
-rw-r--r-- | bn.service | 6 |
4 files changed, 19 insertions, 7 deletions
@@ -1,7 +1,7 @@ pkgbase = libbitcoin-node-git pkgdesc = Bitcoin Full Node pkgver = 20180309 - pkgrel = 2 + pkgrel = 3 url = https://github.com/libbitcoin/libbitcoin-node install = bn.install arch = i686 @@ -44,8 +44,8 @@ pkgbase = libbitcoin-node-git sha256sums = SKIP sha256sums = SKIP sha256sums = f291f3b70b430657e92fd165d6a0ebded28681ce57ab1fdb20e9324d4c68da8e - sha256sums = b1da043ad40e0d80519b32a8b01a66d0fb47a6d2b19e2b7ad3f1b14b6d689bdd - sha256sums = d3730c0c1e0fc85dec828daef1d92113a6a79f6245617934113f4b31af75bc43 + sha256sums = fba120270af0451db203d9e6712cdcee65d1268582ec34ae1fc63783928b4fc2 + sha256sums = 779b3aa788add61bbfc203ece13c8637bdb7a6f437e315955115ff101bbbcc48 sha256sums = 17de557ac9b8a4d354ade339904286fa074facea539984e97b5e83f45a2c305f sha256sums = 6b4e2f95d4ba2a41493ccad5b867aefb9f9b4f5b8ddbbf0da9a51a4a48d915f8 sha256sums = ac81ca8c96872204b55de0e7076ba3e6410069a3ea292a1191aabba5f2f1839f @@ -2,7 +2,7 @@ pkgname=libbitcoin-node-git pkgver=20180309 -pkgrel=2 +pkgrel=3 pkgdesc="Bitcoin Full Node" arch=('i686' 'x86_64') depends=('boost' @@ -39,8 +39,8 @@ source=(git+https://github.com/libbitcoin/libbitcoin-node sha256sums=('SKIP' 'SKIP' 'f291f3b70b430657e92fd165d6a0ebded28681ce57ab1fdb20e9324d4c68da8e' - 'b1da043ad40e0d80519b32a8b01a66d0fb47a6d2b19e2b7ad3f1b14b6d689bdd' - 'd3730c0c1e0fc85dec828daef1d92113a6a79f6245617934113f4b31af75bc43' + 'fba120270af0451db203d9e6712cdcee65d1268582ec34ae1fc63783928b4fc2' + '779b3aa788add61bbfc203ece13c8637bdb7a6f437e315955115ff101bbbcc48' '17de557ac9b8a4d354ade339904286fa074facea539984e97b5e83f45a2c305f' '6b4e2f95d4ba2a41493ccad5b867aefb9f9b4f5b8ddbbf0da9a51a4a48d915f8' 'ac81ca8c96872204b55de0e7076ba3e6410069a3ea292a1191aabba5f2f1839f' @@ -70,7 +70,7 @@ prepare() { -e 's@^directory.*@directory = /srv/obelisk/db@' \ -e 's@^debug_file.*@debug_file = /var/log/obelisk/bn/debug.log@' \ -e 's@^error_file.*@error_file = /var/log/obelisk/bn/error.log@' \ - -e 's@^hosts_file.*@hosts_file = /etc/obelisk/hosts.cache@' \ + -e 's@^hosts_file.*@hosts_file = /srv/obelisk/hosts.cache@' \ -e 's@^archive_directory.*@archive_directory = /var/log/obelisk/bn@' \ -e 's@^rotation_size.*@rotation_size = 5000000@' \ -e 's@^maximum_archive_size.*@maximum_archive_size = 35000000@' \ diff --git a/bn-init.service b/bn-init.service index c62a8e95ae47..84f4bfb97b4b 100644 --- a/bn-init.service +++ b/bn-init.service @@ -7,6 +7,12 @@ Type=oneshot User=obelisk Group=obelisk ExecStart=/usr/bin/bn -i /etc/obelisk/bn/bn.cfg +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectSystem=full +SystemCallArchitectures=native [Install] WantedBy=multi-user.target diff --git a/bn.service b/bn.service index 0d8375b8f768..b8519a0a7731 100644 --- a/bn.service +++ b/bn.service @@ -9,6 +9,12 @@ Group=obelisk ExecStart=/usr/bin/bn /etc/obelisk/bn/bn.cfg ExecReload=/usr/bin/kill -s SIGHUP $MAINPID ExecStop=/usr/bin/kill -s SIGINT $MAINPID +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectSystem=full +SystemCallArchitectures=native [Install] WantedBy=multi-user.target |