Package Details: discord-irc 2.9.0-1

Git Clone URL: https://aur.archlinux.org/discord-irc.git (read-only, click to copy)
Package Base: discord-irc
Description: Connects Discord and IRC channels by sending messages back and forth
Upstream URL: https://github.com/reactiflux/discord-irc
Keywords: discord discord-irc irc
Licenses: MIT
Submitter: crt
Maintainer: crt
Last Packager: crt
Votes: 1
Popularity: 0.000000
First Submitted: 2017-12-16 10:22 (UTC)
Last Updated: 2021-09-15 05:08 (UTC)

Latest Comments

ticpu commented on 2024-09-07 17:22 (UTC) (edited on 2024-09-07 17:23 (UTC) by ticpu)

Since nodejs doesn't like AppArmor, I added those in the service file for some extra protection:

[Service]
CapabilityBoundingSet=
Environment=HOME=/etc/discord-irc
LockPersonality=true
PrivateDevices=yes
ProtectClock=true
ProtectControlGroups=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectProc=invisible
ProcSubset=pid
ProtectSystem=strict
RemoveIPC=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@chown @resources @setuid @privileged setns
WorkingDirectory=/usr/lib/node_modules/discord-irc

systemd-analyze security discord-irc: 1.4 OK

crt commented on 2018-06-06 19:42 (UTC) (edited on 2018-06-06 19:42 (UTC) by crt)

There is an install file referenced in the PKGBUILD install=install which handles the discord-irc user and group, respectively.

post_install() {
  groupadd discord-irc &>/dev/null
  useradd -g discord-irc -d /etc/discord-irc -s /bin/false discord-irc &> /dev/null
  chown -R discord-irc:discord-irc /etc/discord-irc &> /dev/null
}

Thaodan commented on 2018-06-05 18:40 (UTC)

How is the user created during install?