[arch-commits] Commit in interception-tools/trunk (PKGBUILD udevmon.service)
Brett Cornwall
ainola at archlinux.org
Sun Jan 17 00:52:32 UTC 2021
Date: Sunday, January 17, 2021 @ 00:52:30
Author: ainola
Revision: 821245
rm downstream service file, use upstream's
Modified:
interception-tools/trunk/PKGBUILD
Deleted:
interception-tools/trunk/udevmon.service
-----------------+
PKGBUILD | 8 +++-----
udevmon.service | 44 --------------------------------------------
2 files changed, 3 insertions(+), 49 deletions(-)
Modified: PKGBUILD
===================================================================
--- PKGBUILD 2021-01-17 00:06:03 UTC (rev 821244)
+++ PKGBUILD 2021-01-17 00:52:30 UTC (rev 821245)
@@ -3,7 +3,7 @@
pkgname=interception-tools
pkgver=0.6.4
-pkgrel=1
+pkgrel=2
pkgdesc='A minimal composable infrastructure on top of libudev and libevdev'
arch=('x86_64')
license=('GPL3')
@@ -16,10 +16,8 @@
makedepends=('cmake' 'systemd' 'boost')
source=(
"$pkgname-$pkgver.tar.gz::https://gitlab.com/interception/linux/tools/-/archive/v$pkgver/tools-v$pkgver.tar.gz"
- udevmon.service
)
-sha256sums=('1c333588d76ffc7675a32b9f90b2440287d1e2852910a87782878b457c36b3a1'
- 'cb4e046aa95cf591492f99543ce2fdc6d3dc94420893cc069fd568f9822d9e4b')
+sha256sums=('1c333588d76ffc7675a32b9f90b2440287d1e2852910a87782878b457c36b3a1')
build() {
cmake -B build \
@@ -32,7 +30,7 @@
package() {
install -dm755 "$pkgdir/etc/interception/udevmon.d"
- install -Dm644 udevmon.service -t "$pkgdir/usr/lib/systemd/system"
+ install -Dm644 "tools-v$pkgver/udevmon.service" -t "$pkgdir/usr/lib/systemd/system"
install -Dm644 "tools-v$pkgver/README.md" -t "$pkgdir/usr/share/doc/$pkgname"
cd build
Deleted: udevmon.service
===================================================================
--- udevmon.service 2021-01-17 00:06:03 UTC (rev 821244)
+++ udevmon.service 2021-01-17 00:52:30 UTC (rev 821245)
@@ -1,44 +0,0 @@
-[Unit]
-Description=Monitor input devices for launching tasks
-Wants=systemd-udev-settle.service
-After=systemd-udev-settle.service
-Documentation=man:udev(7)
-
-[Service]
-ExecStart=/usr/bin/udevmon -c /etc/interception/udevmon.yaml
-Nice=-20
-Restart=on-failure
-OOMScoreAdjust=-1000
-
-CapabilityBoundingSet=~CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_NET_ADMIN CAP_SYS_RAWIO CAP_SYS_BOOT
-DeviceAllow=char-* rw
-DevicePolicy=strict
-IPAddressDeny=any
-LockPersonality=yes
-MemoryDenyWriteExecute=yes
-NoNewPrivileges=yes
-PrivateMounts=yes
-PrivateTmp=yes
-ProtectControlGroups=yes
-ProtectClock=yes
-ProtectHome=yes
-ProtectHostname=yes
-ProtectKernelLogs=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-PrivateUsers=yes
-ProtectProc=invisible
-ProtectSystem=strict
-RestrictAddressFamilies=AF_NETLINK
-RestrictNamespaces=yes
-RestrictRealtime=yes
-RestrictSUIDSGID=yes
-SystemCallArchitectures=native
-SystemCallErrorNumber=EPERM
-SystemCallFilter=@system-service
-SystemCallFilter=~@privileged @resources
-UMask=077
-ProcSubset=pid
-
-[Install]
-WantedBy=multi-user.target
More information about the arch-commits
mailing list