Improve security

1 files changed, 19 insertions, 4 deletions

diff --git a/PKGBUILD b/PKGBUILD
index 2ce7656d7ff0..7a63c054c549 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,7 +2,7 @@
 
 pkgname=mautrix-googlechat
 pkgver=0.3.0
-pkgrel=2
+pkgrel=3
 pkgdesc="A Matrix-Google Chat puppeting bridge."
 url="https://github.com/mautrix/googlechat"
 depends=(python
@@ -23,10 +23,22 @@ arch=(any)
 install="${pkgname}.install"
 source=("https://github.com/mautrix/googlechat/archive/refs/tags/v${pkgver}.tar.gz"
         "mautrix-googlechat-registration"
-        "mautrix-googlechat.service")
+        "mautrix-googlechat.service"
+        "mautrix-googlechat.sysusers"
+        "mautrix-googlechat.tmpfiles"
+        "log-path.patch")
+backup=("etc/${pkgname}/config.yaml")
 sha256sums=('82c2b3c5acea8a85b0753ccb9c67576b42680f37312832fee537492a9363814e'
-            'f6693ed10a1d76ef94fdb37801514523ea1809cf0ea71e83c44f5832118237f9'
-            '2117e24762e2e8731069020720afff3c6024f506cb6c68c9dd7361262fbcb0e3')
+            'a24774abbdf132a18b89709734a58cf14c674176121cb6e9a5f28d39a73c8bc2'
+            '0bbaf8d7cec830e86bf65e7d1f01822f3ab3e057fa805c9f17ee91f99f8a11cf'
+            '6653023ceb1bfcfed001f0c722ef82c2584d1a84100d7d38a1641d47b23e544a'
+            'a3c993e32ad5710ba2d0d24c9355a3d4fcd58fa01fe396ee9b0a9870f3592f99'
+            'dd838686f7dac3130b83e8b8ffbb54c36097470018466102bc0c609385d9b472')
+
+prepare() {
+  cd googlechat-${pkgver}
+  patch -p1 -i "${srcdir}/log-path.patch"
+}
 
 build() {
   cd googlechat-${pkgver}
@@ -41,4 +53,7 @@ package() {
   rm ${pkgdir}/usr/example-config.yaml
   install -Dm755 ${srcdir}/mautrix-googlechat-registration ${pkgdir}/usr/bin/mautrix-googlechat-registration
   install -Dm644 ${srcdir}/mautrix-googlechat.service ${pkgdir}/usr/lib/systemd/system/mautrix-googlechat.service
+
+  install -Dm644 "$srcdir/mautrix-googlechat.sysusers" "$pkgdir/usr/lib/sysusers.d/mautrix-googlechat.conf"
+  install -Dm644 "$srcdir/mautrix-googlechat.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/mautrix-googlechat.conf"
 }