diff options
| -rw-r--r-- | .SRCINFO | 6 | ||||
| -rw-r--r-- | PKGBUILD | 8 | ||||
| -rw-r--r-- | bn-init.service | 6 | ||||
| -rw-r--r-- | bn.service | 6 |
4 files changed, 19 insertions, 7 deletions
@@ -1,7 +1,7 @@ pkgbase = libbitcoin-node-git pkgdesc = Bitcoin Full Node pkgver = 20180309 - pkgrel = 2 + pkgrel = 3 url = https://github.com/libbitcoin/libbitcoin-node install = bn.install arch = i686 @@ -44,8 +44,8 @@ pkgbase = libbitcoin-node-git sha256sums = SKIP sha256sums = SKIP sha256sums = f291f3b70b430657e92fd165d6a0ebded28681ce57ab1fdb20e9324d4c68da8e - sha256sums = b1da043ad40e0d80519b32a8b01a66d0fb47a6d2b19e2b7ad3f1b14b6d689bdd - sha256sums = d3730c0c1e0fc85dec828daef1d92113a6a79f6245617934113f4b31af75bc43 + sha256sums = fba120270af0451db203d9e6712cdcee65d1268582ec34ae1fc63783928b4fc2 + sha256sums = 779b3aa788add61bbfc203ece13c8637bdb7a6f437e315955115ff101bbbcc48 sha256sums = 17de557ac9b8a4d354ade339904286fa074facea539984e97b5e83f45a2c305f sha256sums = 6b4e2f95d4ba2a41493ccad5b867aefb9f9b4f5b8ddbbf0da9a51a4a48d915f8 sha256sums = ac81ca8c96872204b55de0e7076ba3e6410069a3ea292a1191aabba5f2f1839f @@ -2,7 +2,7 @@ pkgname=libbitcoin-node-git pkgver=20180309 -pkgrel=2 +pkgrel=3 pkgdesc="Bitcoin Full Node" arch=('i686' 'x86_64') depends=('boost' @@ -39,8 +39,8 @@ source=(git+https://github.com/libbitcoin/libbitcoin-node sha256sums=('SKIP' 'SKIP' 'f291f3b70b430657e92fd165d6a0ebded28681ce57ab1fdb20e9324d4c68da8e' - 'b1da043ad40e0d80519b32a8b01a66d0fb47a6d2b19e2b7ad3f1b14b6d689bdd' - 'd3730c0c1e0fc85dec828daef1d92113a6a79f6245617934113f4b31af75bc43' + 'fba120270af0451db203d9e6712cdcee65d1268582ec34ae1fc63783928b4fc2' + '779b3aa788add61bbfc203ece13c8637bdb7a6f437e315955115ff101bbbcc48' '17de557ac9b8a4d354ade339904286fa074facea539984e97b5e83f45a2c305f' '6b4e2f95d4ba2a41493ccad5b867aefb9f9b4f5b8ddbbf0da9a51a4a48d915f8' 'ac81ca8c96872204b55de0e7076ba3e6410069a3ea292a1191aabba5f2f1839f' @@ -70,7 +70,7 @@ prepare() { -e 's@^directory.*@directory = /srv/obelisk/db@' \ -e 's@^debug_file.*@debug_file = /var/log/obelisk/bn/debug.log@' \ -e 's@^error_file.*@error_file = /var/log/obelisk/bn/error.log@' \ - -e 's@^hosts_file.*@hosts_file = /etc/obelisk/hosts.cache@' \ + -e 's@^hosts_file.*@hosts_file = /srv/obelisk/hosts.cache@' \ -e 's@^archive_directory.*@archive_directory = /var/log/obelisk/bn@' \ -e 's@^rotation_size.*@rotation_size = 5000000@' \ -e 's@^maximum_archive_size.*@maximum_archive_size = 35000000@' \ diff --git a/bn-init.service b/bn-init.service index c62a8e95ae47..84f4bfb97b4b 100644 --- a/bn-init.service +++ b/bn-init.service @@ -7,6 +7,12 @@ Type=oneshot User=obelisk Group=obelisk ExecStart=/usr/bin/bn -i /etc/obelisk/bn/bn.cfg +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectSystem=full +SystemCallArchitectures=native [Install] WantedBy=multi-user.target diff --git a/bn.service b/bn.service index 0d8375b8f768..b8519a0a7731 100644 --- a/bn.service +++ b/bn.service @@ -9,6 +9,12 @@ Group=obelisk ExecStart=/usr/bin/bn /etc/obelisk/bn/bn.cfg ExecReload=/usr/bin/kill -s SIGHUP $MAINPID ExecStop=/usr/bin/kill -s SIGINT $MAINPID +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectSystem=full +SystemCallArchitectures=native [Install] WantedBy=multi-user.target |