[arch-commits] Commit in rsync/trunk (PKGBUILD rsyncd.service rsyncd at .service)

[Christian Hesse]

    Date: Wednesday, October 11, 2017 @ 16:21:05
  Author: eworm
Revision: 307506

upgpkg: rsync 3.1.2-4

* switch to sha256 checksums
* link against system zlib
* add some systemd security features

Modified:
  rsync/trunk/PKGBUILD
  rsync/trunk/rsyncd.service
  rsync/trunk/rsyncd at .service

-----------------+
 PKGBUILD        |   26 +++++++++++++++-----------
 rsyncd.service  |    4 ++++
 rsyncd at .service |    4 ++++
 3 files changed, 23 insertions(+), 11 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2017-10-11 16:09:25 UTC (rev 307505)
+++ PKGBUILD	2017-10-11 16:21:05 UTC (rev 307506)
@@ -2,7 +2,7 @@
 
 pkgname=rsync
 pkgver=3.1.2
-pkgrel=3
+pkgrel=4
 pkgdesc="A file transfer program to keep remote files in sync"
 arch=('i686' 'x86_64')
 url="https://rsync.samba.org/"
@@ -9,22 +9,26 @@
 license=('GPL3')
 depends=('perl' 'popt' 'acl' 'zlib')
 backup=('etc/rsyncd.conf' 'etc/xinetd.d/rsync')
+validpgpkeys=('0048C8B026D4C96F0E589C2F6C859FB14B96A8C5') # Wayne Davison <wayned at users.sourceforge.net>
 source=("https://rsync.samba.org/ftp/rsync/$pkgname-$pkgver.tar.gz"{,.asc}
-        'rsyncd.conf' 'rsync.xinetd' 'rsyncd.service'
-        'rsyncd.socket' 'rsyncd at .service')
-md5sums=('0f758d7e000c0f7f7d3792610fad70cb'
-         'SKIP'
-         'bce64d122a8e0f86872a4a21a03bc7f3'
-         'ea3e9277dc908bc51f9eddc0f6b935c1'
-         'f90ba7f3717028769d6f230a2402b5aa'
-         'ae4c381e0c02d6132c7f6ded3f473041'
-         'ceab0b656e5e8239df594040b3b31d3c')
-validpgpkeys=('0048C8B026D4C96F0E589C2F6C859FB14B96A8C5')
+        'rsyncd.conf'
+        'rsync.xinetd'
+        'rsyncd.service'
+        'rsyncd.socket'
+        'rsyncd at .service')
+sha256sums=('ecfa62a7fa3c4c18b9eccd8c16eaddee4bd308a76ea50b5c02a5840f09c0a1c2'
+            'SKIP'
+            '733ccb571721433c3a6262c58b658253ca6553bec79c2bdd0011810bb4f2156b'
+            'da0ec9ce07bf2edafbc8e44020da29a58038b00c3048a22de57017c56318a767'
+            'c6998eaa5f3baa0e02830c182acacbb966187c428f8e42eab087f681f8e3d0a6'
+            '551f17407de0e539c8419fc2cd48dd0124eb0253a186690b165b51703ffad1a5'
+            '53e9e2546a74ce622f4eabc5590662fc2d0b06467f71f95428ab7926ea7e24c4')
 
 build() {
 	cd "$srcdir/$pkgname-$pkgver"
 	./configure --prefix=/usr \
 		--with-included-popt=no \
+		--with-included-zlib=no \
 		--disable-debug
 	make
 }

Modified: rsyncd.service
===================================================================
--- rsyncd.service	2017-10-11 16:09:25 UTC (rev 307505)
+++ rsyncd.service	2017-10-11 16:21:05 UTC (rev 307506)
@@ -5,6 +5,10 @@
 [Service]
 ExecStart=/usr/bin/rsync --daemon --no-detach
 RestartSec=1
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
 
 [Install]
 WantedBy=multi-user.target

Modified: rsyncd at .service
===================================================================
--- rsyncd at .service	2017-10-11 16:09:25 UTC (rev 307505)
+++ rsyncd at .service	2017-10-11 16:21:05 UTC (rev 307506)
@@ -7,3 +7,7 @@
 StandardInput=socket
 StandardOutput=inherit
 StandardError=journal
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on