Date: Saturday, December 15, 2018 @ 22:18:32 Author: jelle Revision: 416418
upgpkg: mosquitto 1.5.5-1 Harden systemd service and update to latest release Modified: mosquitto/trunk/PKGBUILD mosquitto/trunk/mosquitto.service -------------------+ PKGBUILD | 6 +++--- mosquitto.service | 8 +++++++- 2 files changed, 10 insertions(+), 4 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2018-12-15 21:40:52 UTC (rev 416417) +++ PKGBUILD 2018-12-15 22:18:32 UTC (rev 416418) @@ -3,7 +3,7 @@ # Contributor: Dan Anderson <dan-anderson at cox dptnet> pkgname=mosquitto -pkgver=1.5.4 +pkgver=1.5.5 pkgrel=1 pkgdesc="An Open Source MQTT v3.1/v3.1.1 Broker" arch=('x86_64') @@ -15,9 +15,9 @@ "$pkgname.service" "sysusers_mosquitto.conf") backup=("etc/$pkgname/$pkgname.conf") -sha256sums=('5fd7f3454fd6d286645d032bc07f44a1c8583cec02ef2422c9eb32e0a89a9b2f' +sha256sums=('fcdb47e340864c545146681af7253399cc292e41775afd76400fda5b0d23d668' 'SKIP' - '3480aa1a9da543230fbbb0e7e11cde9db2736e486cd024fbd505f927188fa3a2' + '539b6aa2f88bba25fead1a5cbb285f18470c244391c0dfcac8d3f59e99a0652d' '7ba9ae9e3219e24c1585760f39fab5632ded52172cd8193cc4adbd8af46c5197') validpgpkeys=('A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7') Modified: mosquitto.service =================================================================== --- mosquitto.service 2018-12-15 21:40:52 UTC (rev 416417) +++ mosquitto.service 2018-12-15 22:18:32 UTC (rev 416418) @@ -3,10 +3,16 @@ Requires=network.target [Service] +User=mosquitto ExecStart=/usr/bin/mosquitto -c /etc/mosquitto/mosquitto.conf ExecReload=/bin/kill -HUP $MAINPID Restart=on-failure +NoNewPrivileges=yes +ProtectSystem=full +ProtectHome=true +PrivateTmp=true +PrivateDevices=true + [Install] WantedBy=multi-user.target -