AMajor/SoftEtherVPN
1
0
Fork 0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2024-11-22 09:29:52 +03:00
Code Releases Activity

reapply other RPM fixes from prior PR (service file updates and systemd path exclusions)

Browse Source
This commit is contained in:
Steve Muskiewicz 2021-08-19 09:10:26 -04:00
parent 472dde05de
commit 0eb0152437
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
CMakeLists.txt
View File

@ -95,6 +95,9 @@ if(UNIX)
COMMAND tr \n \; COMMAND tr \n \;
OUTPUT_VARIABLE CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION OUTPUT_VARIABLE CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION
ERROR_QUIET) ERROR_QUIET)
list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION "/lib")
list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION "/lib/systemd")
list(APPEND CPACK_RPM_EXCLUDE_FROM_AUTO_FILELIST_ADDITION "/lib/systemd/system")
endif() endif()
include(CPack) include(CPack)

7
systemd/softether-vpnserver.service
View File

@ -16,8 +16,11 @@ Restart=on-failure
PrivateTmp=yes PrivateTmp=yes
ProtectHome=yes ProtectHome=yes
ProtectSystem=full ProtectSystem=full
ReadOnlyDirectories=/ ReadOnlyPaths=/
ReadWriteDirectories=-@DIR@/softether/vpnserver ReadWritePaths=-@DIR@/softether/vpnserver
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/run/softether
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/log/softether
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/lib/softether
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
[Install] [Install]