From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 65E5113835A for ; Wed, 23 Sep 2020 03:34:52 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 10C6DE0869; Wed, 23 Sep 2020 03:34:51 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id EDE1EE0869 for ; Wed, 23 Sep 2020 03:34:50 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id F3364340DEB for ; Wed, 23 Sep 2020 03:34:48 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 6FF6C379 for ; Wed, 23 Sep 2020 03:34:47 +0000 (UTC) From: "Michael Orlitzky" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Michael Orlitzky" Message-ID: <1600831404.124e3a9de085193aaed33e1394db2c8bdecfcf2f.mjo@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: app-antivirus/clamav/files/, app-antivirus/clamav/ X-VCS-Repository: repo/gentoo X-VCS-Files: app-antivirus/clamav/clamav-0.103.0.ebuild app-antivirus/clamav/files/freshclamd.service-r1 X-VCS-Directories: app-antivirus/clamav/ app-antivirus/clamav/files/ X-VCS-Committer: mjo X-VCS-Committer-Name: Michael Orlitzky X-VCS-Revision: 124e3a9de085193aaed33e1394db2c8bdecfcf2f X-VCS-Branch: master Date: Wed, 23 Sep 2020 03:34:47 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 29fff6ef-7e22-4c28-9e99-a4323415d53d X-Archives-Hash: 4d17ea3bf546156689b6e507da18227b commit: 124e3a9de085193aaed33e1394db2c8bdecfcf2f Author: Michael Orlitzky gentoo org> AuthorDate: Tue Sep 22 15:45:22 2020 +0000 Commit: Michael Orlitzky gentoo org> CommitDate: Wed Sep 23 03:23:24 2020 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=124e3a9d app-antivirus/clamav: update freshclamd.service for v0.103.0. Our freshclam systemd service was wonky: by default, freshclam when launched as root will drop privileges to the "clamav" user. Since our systemd service is type=forking, it doesn't need to be launched as the unprivileged user. And, since we're specifying a PID file, launching as root means that the PID file directory (now /run) does not need to be writable by the "clamav" user. All fixed in an -r1 of the service. Package-Manager: Portage-3.0.4, Repoman-3.0.1 Signed-off-by: Michael Orlitzky gentoo.org> app-antivirus/clamav/clamav-0.103.0.ebuild | 3 ++- app-antivirus/clamav/files/freshclamd.service-r1 | 10 ++++++++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/app-antivirus/clamav/clamav-0.103.0.ebuild b/app-antivirus/clamav/clamav-0.103.0.ebuild index f5e3d508cf5..4217bc62b77 100644 --- a/app-antivirus/clamav/clamav-0.103.0.ebuild +++ b/app-antivirus/clamav/clamav-0.103.0.ebuild @@ -129,7 +129,8 @@ src_install() { dotmpfiles "${FILESDIR}/tmpfiles.d/clamav.conf" systemd_newunit "${FILESDIR}/clamd_at.service" "clamd@.service" systemd_dounit "${FILESDIR}/clamd.service" - systemd_dounit "${FILESDIR}/freshclamd.service" + systemd_newunit "${FILESDIR}/freshclamd.service-r1" \ + "freshclamd.service" fi insinto /etc/logrotate.d diff --git a/app-antivirus/clamav/files/freshclamd.service-r1 b/app-antivirus/clamav/files/freshclamd.service-r1 new file mode 100644 index 00000000000..fa1e0139ddd --- /dev/null +++ b/app-antivirus/clamav/files/freshclamd.service-r1 @@ -0,0 +1,10 @@ +[Unit] +Description=clamav updater + +[Service] +Type=forking +PIDFile=/run/freshclam.pid +ExecStart=/usr/bin/freshclam -d -p /run/freshclam.pid + +[Install] +WantedBy=multi-user.target