[arch-commits] Commit in interception-tools/repos/community-x86_64 (5 files)

[Brett Cornwall]

    Date: Friday, January 1, 2021 @ 00:25:29
  Author: ainola
Revision: 801432

archrelease: copy trunk to community-x86_64

Added:
  interception-tools/repos/community-x86_64/PKGBUILD
    (from rev 801430, interception-tools/trunk/PKGBUILD)
  interception-tools/repos/community-x86_64/interception-tools.install
    (from rev 801431, interception-tools/trunk/interception-tools.install)
  interception-tools/repos/community-x86_64/udevmon.service
    (from rev 801431, interception-tools/trunk/udevmon.service)
Deleted:
  interception-tools/repos/community-x86_64/PKGBUILD
  interception-tools/repos/community-x86_64/interception-tools.install

----------------------------+
 PKGBUILD                   |   77 ++++++++++++++++++++++---------------------
 interception-tools.install |    8 ++--
 udevmon.service            |   44 ++++++++++++++++++++++++
 3 files changed, 88 insertions(+), 41 deletions(-)

Deleted: PKGBUILD
===================================================================
--- PKGBUILD	2021-01-01 00:25:22 UTC (rev 801431)
+++ PKGBUILD	2021-01-01 00:25:29 UTC (rev 801432)
@@ -1,37 +0,0 @@
-# Maintainer: Brett Cornwall <ainola at archlinux.org>
-# Contributor: Francisco Lopes
-
-pkgname=interception-tools
-pkgver=0.3.4
-pkgrel=1
-pkgdesc='A minimal composable infrastructure on top of libudev and libevdev'
-arch=('x86_64')
-license=('GPL3')
-url='https://gitlab.com/interception/linux/tools'
-# Add 'libevdev.so' once https://bugs.archlinux.org/task/69112 is fixed
-depends=(
-    'libevdev' 'libevdev.so'
-    'yaml-cpp' 'libyaml-cpp.so'
-    'systemd-libs' 'libudev.so'
-)
-makedepends=('cmake' 'systemd' 'boost')
-source=("$pkgname-$pkgver.tar.gz::https://gitlab.com/interception/linux/tools/-/archive/v$pkgver/tools-v$pkgver.tar.gz")
-sha256sums=('0c56fc123b2cb1b71c8390e56a1c72dab59456cde8896e23c18198c9e9b60678')
-
-build() {
-    cmake -B build \
-          -S "tools-v${pkgver}" \
-          -DCMAKE_INSTALL_PREFIX=/usr \
-          -DCMAKE_BUILD_TYPE=None \
-          -Wno-dev
-    cmake --build build
-}
-
-package() {
-    install -dm755 "$pkgdir/etc/interception/udevmon.d"
-    install -Dm644 "tools-v$pkgver/udevmon.service" -t "$pkgdir/usr/lib/systemd/system"
-    install -Dm644 "tools-v$pkgver/README.md" -t "$pkgdir/usr/share/doc/$pkgname"
-
-    cd build
-    make DESTDIR="$pkgdir/" install
-}

Copied: interception-tools/repos/community-x86_64/PKGBUILD (from rev 801430, interception-tools/trunk/PKGBUILD)
===================================================================
--- PKGBUILD	                        (rev 0)
+++ PKGBUILD	2021-01-01 00:25:29 UTC (rev 801432)
@@ -0,0 +1,40 @@
+# Maintainer: Brett Cornwall <ainola at archlinux.org>
+# Contributor: Francisco Lopes
+
+pkgname=interception-tools
+pkgver=0.4.3
+pkgrel=1
+pkgdesc='A minimal composable infrastructure on top of libudev and libevdev'
+arch=('x86_64')
+license=('GPL3')
+url='https://gitlab.com/interception/linux/tools'
+depends=(
+    'libevdev' 'libevdev.so'
+    'yaml-cpp' 'libyaml-cpp.so'
+    'systemd-libs' 'libudev.so'
+)
+makedepends=('cmake' 'systemd' 'boost')
+source=(
+    "$pkgname-$pkgver.tar.gz::https://gitlab.com/interception/linux/tools/-/archive/v$pkgver/tools-v$pkgver.tar.gz"
+    udevmon.service
+)
+sha256sums=('7a755cfcf511dbc86aa19a16906a539eccfdc3a5b83e13c27e17a5488696d27a'
+            'cb4e046aa95cf591492f99543ce2fdc6d3dc94420893cc069fd568f9822d9e4b')
+
+build() {
+    cmake -B build \
+          -S "tools-v${pkgver}" \
+          -DCMAKE_INSTALL_PREFIX=/usr \
+          -DCMAKE_BUILD_TYPE=None \
+          -Wno-dev
+    cmake --build build
+}
+
+package() {
+    install -dm755 "$pkgdir/etc/interception/udevmon.d"
+    install -Dm644 udevmon.service -t "$pkgdir/usr/lib/systemd/system"
+    install -Dm644 "tools-v$pkgver/README.md" -t "$pkgdir/usr/share/doc/$pkgname"
+
+    cd build
+    make DESTDIR="$pkgdir/" install
+}

Deleted: interception-tools.install
===================================================================
--- interception-tools.install	2021-01-01 00:25:22 UTC (rev 801431)
+++ interception-tools.install	2021-01-01 00:25:29 UTC (rev 801432)
@@ -1,4 +0,0 @@
-post_upgrade() {
-    echo "The udevmon.yaml configuration file now is expected at:"
-    echo "    /etc/interception-tools/udevmon.yaml"
-}

Copied: interception-tools/repos/community-x86_64/interception-tools.install (from rev 801431, interception-tools/trunk/interception-tools.install)
===================================================================
--- interception-tools.install	                        (rev 0)
+++ interception-tools.install	2021-01-01 00:25:29 UTC (rev 801432)
@@ -0,0 +1,4 @@
+post_upgrade() {
+    echo "The udevmon.yaml configuration file now is expected at:"
+    echo "    /etc/interception-tools/udevmon.yaml"
+}

Copied: interception-tools/repos/community-x86_64/udevmon.service (from rev 801431, interception-tools/trunk/udevmon.service)
===================================================================
--- udevmon.service	                        (rev 0)
+++ udevmon.service	2021-01-01 00:25:29 UTC (rev 801432)
@@ -0,0 +1,44 @@
+[Unit]
+Description=Monitor input devices for launching tasks
+Wants=systemd-udev-settle.service
+After=systemd-udev-settle.service
+Documentation=man:udev(7)
+
+[Service]
+ExecStart=/usr/bin/udevmon -c /etc/interception/udevmon.yaml
+Nice=-20
+Restart=on-failure
+OOMScoreAdjust=-1000
+
+CapabilityBoundingSet=~CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_NET_ADMIN CAP_SYS_RAWIO CAP_SYS_BOOT
+DeviceAllow=char-* rw
+DevicePolicy=strict
+IPAddressDeny=any
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+PrivateMounts=yes
+PrivateTmp=yes
+ProtectControlGroups=yes
+ProtectClock=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+PrivateUsers=yes
+ProtectProc=invisible
+ProtectSystem=strict
+RestrictAddressFamilies=AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service
+SystemCallFilter=~@privileged @resources
+UMask=077
+ProcSubset=pid
+
+[Install]
+WantedBy=multi-user.target