From 1f2bdcc8214a058cb11576bc83ecdda85b68dfe7 Mon Sep 17 00:00:00 2001 From: Will Springer Date: Wed, 4 Mar 2020 17:18:23 -0800 Subject: [PATCH] yggdrasil: add changes from upstream systemd unit Attempt to load tun module in service Drop unnecessary caps when running service --- srcpkgs/yggdrasil/files/yggdrasil/run | 7 +++++-- srcpkgs/yggdrasil/template | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/srcpkgs/yggdrasil/files/yggdrasil/run b/srcpkgs/yggdrasil/files/yggdrasil/run index c383bafca9d..4ee19bbaf77 100755 --- a/srcpkgs/yggdrasil/files/yggdrasil/run +++ b/srcpkgs/yggdrasil/files/yggdrasil/run @@ -1,6 +1,9 @@ #!/bin/sh +modprobe tun +caps='-all,+NET_ADMIN,+NET_RAW' +drop_caps="setpriv --inh-caps $caps --bounding-set $caps" if [ -f /etc/yggdrasil.conf ]; then - exec /usr/bin/yggdrasil --useconffile /etc/yggdrasil.conf 1>/dev/null + exec $drop_caps yggdrasil --useconffile /etc/yggdrasil.conf 1>/dev/null else - exec /usr/bin/yggdrasil --autoconf 1>/dev/null + exec $drop_caps yggdrasil --autoconf 1>/dev/null fi diff --git a/srcpkgs/yggdrasil/template b/srcpkgs/yggdrasil/template index 955fbb0368b..865baefdd59 100644 --- a/srcpkgs/yggdrasil/template +++ b/srcpkgs/yggdrasil/template @@ -1,7 +1,7 @@ # Template file for 'yggdrasil' pkgname=yggdrasil version=0.3.14 -revision=1 +revision=2 wrksrc="yggdrasil-go-${version}" build_style=go go_import_path=github.com/yggdrasil-network/yggdrasil-go