Arch Linux User Repository

@escape0707 It was exactly from extra/chromium that I took it to be still a good thing to do security-wise. I'll dig through my notes and add more detailed info. Thanks for the speedy change!

@glitsj16 Thanks for the note. I've never saw related info on the Electron package guidelines page, but after some search, I decided to follow extra/chromium and give chrome-sandbox SUID. I would be grateful if you could leave some related documentation explaining the necessity of this, though.

The chrome-sandbox file needs to be SUID. That's a rather important security feature. Please correct this. A one-liner change: chmod 4755 $pkgdir/opt/Session/chrome-sandbox

Old unnecessary .install file removed from this package. If you see an error message saying /usr/bin/session-messenger-desktop already exists during your next update, you can simply sudo rm /usr/bin/session-messenger-desktop then redo the updating process.

It's because previously this package used a .install script to create the symlink in /usr/bin to the actual executable file installed in /opt, and thus this symlink is not managed by pacman directly. When you upgrade, pacman will frown upon this file and refuse to overwrite files it doesn't recoginzed yet. So just rm the symlink and restart updating again.

@post-factum Oh yes, you are right. I thought about changing these part when I applied to take over this orphaned package, but forgot it when the take-over happened. I'll look into it when I'm home.

There's no point in creating the /usr/bin/session-messenger-desktop unpackaged symlink in the .install file. This should be replaced by the following commands in the PKGBUILD:

install -Ddm0755 "${pkgdir}"/usr/bin
ln -s /opt/Session/session-desktop "${pkgdir}"/usr/bin/session-messenger-desktop

Also, there's no need to call update-desktop-database/gtk-update-icon-cache in the .install file as pacman hook takes care of that automatically.

This means the .install file can and should be removed.

Updated PKGBUILD

# Maintainer: Carson Rueter <roachh at proton mail dot com>
# Contributor: xXR01I1Xx <xxr01i1xx@tuta.io>
# Contributor: Ewhal <ewhal@pantsu.cat>
pkgname=session-desktop-bin
pkgver=1.10.8
pkgrel=1
pkgdesc="Private messaging from your desktop"
arch=(x86_64)
url="https://getsession.org"
license=('GPL-3.0')
depends=(libxtst nss alsa-lib libxss libnotify xdg-utils)
optdepends=('libappindicator-gtk3: for tray support')
provides=(session-messenger-desktop)
conflicts=(session-desktop session-desktop-git session-desktop-appimage)
options=(!strip)
install=$pkgname.install
source=(https://github.com/oxen-io/session-desktop/releases/download/v$pkgver/session-desktop-linux-amd64-$pkgver.deb)
sha256sums=('720fdfbee605259d417cb481e32f6d56a9153b6d5d54e62f749055e73d36dc31')

package() {
    tar xf $srcdir/data.tar.xz -C $pkgdir
}

@sperg512 Hi, do you have have time to update package? You can add me as Co-Maintainer if you need help.

Recently the binary has been complaining about chrome-sandbox not being setuid. I've fixed this by including the following in package():

chmod u+s $pkgdir/opt/Session/chrome-sandbox

Thanks, I forgot about this lol. I will get this updated now (assuming my ISP didn't block SSH again...)