[arch-commits] Commit in matrix-appservice-irc/trunk (2 files)

[David Runge]

    Date: Thursday, March 12, 2020 @ 22:07:55
  Author: dvzrv
Revision: 595589

upgpkg: matrix-appservice-irc 0.16.0-3: Resetting CapabilityBoundingSet, as the service actually doesn't need any. Adding ProtectClock=yes, although it seemingly can't be disabled (according to systemd-analyze security).

Modified:
  matrix-appservice-irc/trunk/PKGBUILD
  matrix-appservice-irc/trunk/matrix-appservice-irc.service

-------------------------------+
 PKGBUILD                      |    4 ++--
 matrix-appservice-irc.service |    3 ++-
 2 files changed, 4 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2020-03-12 22:00:39 UTC (rev 595588)
+++ PKGBUILD	2020-03-12 22:07:55 UTC (rev 595589)
@@ -3,7 +3,7 @@
 
 pkgname=matrix-appservice-irc
 pkgver=0.16.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Node.js IRC bridge for Matrix"
 arch=('x86_64')
 url="https://github.com/matrix-org/matrix-appservice-irc"
@@ -18,7 +18,7 @@
         "${pkgname}.sysusers"
         "${pkgname}.tmpfiles")
 sha512sums=('1a87082d15c9cae7a7e357fa4737fc36405f67ec1f10ae748ed703dc89ac68bc398887e287bd2f8a42e0a40e7703cf68d774b5c7aa06218e15428ded2de5e9de'
-            '2e7e17c5b92a31d8c7bf6b5d2ded3156d61cecd4c6cacc72d7dcd7758e6ca5a5f7254f0c73481498c5202219ef72b3378c53f22ac01bf69e43c469e77ce61f77'
+            'f1d1351a554f68537c7fc5771dddc0267a1f19d214bef935faca7b161d611145e3c127c77ae4eefc10c002a2f2f7a8d90e353b0e526ab83a9666d7d457fc449c'
             'f615e5da11be8d834d6f48f064a65a9b7aa129d255be7865a171522d5aed921eb549a33661ab2c4fff4625d2ca5a7f9c43be95c188e7a77bdde4062aa3983edd'
             '60b7afdd68aaf2c8e47caf10efefb6c4dc54f40d187ad495a604786b30c00dac7e5c77a7b596d86c2a62a7cdbe3727e11f75494f86d26c9fc51ea7a1bf6ab7f0')
 

Modified: matrix-appservice-irc.service
===================================================================
--- matrix-appservice-irc.service	2020-03-12 22:00:39 UTC (rev 595588)
+++ matrix-appservice-irc.service	2020-03-12 22:07:55 UTC (rev 595589)
@@ -3,7 +3,7 @@
 After=network.target synapse.service
 
 [Service]
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=
 ExecStart=/usr/bin/node /usr/lib/node_modules/matrix-appservice-irc/app.js -c /etc/matrix-appservice-irc/config.yaml -f /etc/matrix-appservice-irc/registration.yaml
 Group=matrix-appservice-irc
 LockPersonality=yes
@@ -10,6 +10,7 @@
 NoNewPrivileges=true
 PrivateDevices=true
 PrivateTmp=true
+ProtectClock=yes
 ProtectControlGroups=yes
 ProtectHome=yes
 ProtectHostname=yes