diff --git a/extra-repos/systemd/systemd-services/APKBUILD b/extra-repos/systemd/systemd-services/APKBUILD index 06d9129a9..09a0134c9 100644 --- a/extra-repos/systemd/systemd-services/APKBUILD +++ b/extra-repos/systemd/systemd-services/APKBUILD @@ -6,7 +6,7 @@ # How to add a new service file (4 steps): pkgname=systemd-services # 1. bump pkgver -pkgver=8 +pkgver=9 pkgrel=0 pkgdesc="Systemd service files" url="https://postmarketos.org" @@ -25,8 +25,12 @@ subpackages=" bluez-service:_service dconf-service:_service flatpak-service:_service + geoclue-service:_service + gnome-clocks:_service hexagonrpcd-service:_service iio-sensor-proxy-service:_service + iwd-service:_service + mmsd-tng-service:_service modemmanager-service:_service nftables-service:_service openssh-server-pam-service:_service @@ -49,11 +53,15 @@ subpackages=" # to install for that package _apk_polkit_rs_sources="system/apk-polkit-server.service" _at_spi2_core_sources="user/at-spi-dbus-bus.service" -_bluez_sources="system/bluetooth.service" +_bluez_sources="system/bluetooth.service user/mpris-proxy.service" _dconf_sources="user/dconf.service" _flatpak_sources="system/flatpak-system-helper.service user/flatpak-session-helper.service user/flatpak-portal.service" +_geoclue_sources="system/geoclue.service" # From https://gitlab.freedesktop.org/geoclue/geoclue/-/blob/master/data/geoclue.service.in +_gnome_clocks_sources="user/gnome-clocks.service" _hexagonrpcd_sources="system/hexagonrpcd-sdsp.service system/iio-sensor-proxy.d/hexagonrpcd.conf" _iio_sensor_proxy_sources="system/iio-sensor-proxy.service" +_iwd_sources="system/iwd.service" # From https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.service.in +_mmsd_tng_sources="user/mmsd-tng.service" _modemmanager_sources="system/ModemManager.service" _nftables_sources="system/nftables.service" _openssh_server_pam_sources="system/sshd.service system/sshdgenkeys.service" @@ -91,8 +99,12 @@ source="$(flatpath \ $_bluez_sources \ $_dconf_sources \ $_flatpak_sources \ + $_geoclue_sources \ + $_gnome_clocks_sources \ $_hexagonrpcd_sources \ $_iio_sensor_proxy_sources \ + $_iwd_sources \ + $_mmsd_tng_sources \ $_modemmanager_sources \ $_nftables_sources \ $_openssh_server_pam_sources \ @@ -130,13 +142,18 @@ sha512sums=" 269dfc4748a9f1c4f49be8bab399d7412b6ff3b6d6ed9b3f2e31074b791789fb39aad450b4d43d318e7a070d1118ba79f216782b064cd106feac3eb4a8ca5581 system-apk-polkit-server.service 12f5e008b0a41b3426b29f33556689ef88ba7184293ddb78fdaaf05cc4d029fd0b4c8fbef668aefed103a9f48c525f04a8e4e60ddc6e4329698aaf761b8e8f81 user-at-spi-dbus-bus.service de133c35cf95d7c833368c9010264668e72657400ad4e5259ef046321c878507f36ef73fa7b4759f69c9d18cda8f8db8d7675d794d9a28f46480fb4d47ba9e0c system-bluetooth.service +00049b418fab6dec7d9931a87cc64d2062efa0f7128bec1a693bfdf112703e628a2f1c98d2d5bf71554e6e576882890cef7a02de283909b1dd2f4c5ec0f6393e user-mpris-proxy.service e4de73d12abd046c8683e3be6e3aab40a5db3f5d6246cedbb3ff099bcc8037a167b23ac957d30f1118db571b69cb10c042272ac2b54dacf83fa6a3e9dad13a87 user-dconf.service 0cfef56afeea103ca487b36f13665021bb349b8c890f023135a93c47d45cb58dd39ffe76212fb780546b1aaed8174e40345a961d7125f7d7ace5921e1dcc7ba9 system-flatpak-system-helper.service 815a3072c211c85ff475ac7f2fb9c280b567b98777c0f7bf7fea4575b5eaa3b9a4003a08eb3b8cb5b2d7f9fb6525e04491e8d87013e2539ae3a574db647f97b1 user-flatpak-session-helper.service 7a17986c0f0554f0b27a5933b3e04657323edb23047878616727863fdc748cb8d8fea978f43895341037e2d1512bbd492bdbc19c40419cd3e109345614645388 user-flatpak-portal.service +f3463b85ac47055b400dfd2e24694c5e1dc6ab039efac0fe54496fc027c0732cda5e52a362a497b372dea671dc615154e8abfea866728d243cbbcd25e68a91aa system-geoclue.service +bc7987a001d2076788d904f1ea6d3e97a2ab905ee55302ffb90402133c2b9fb760d7ad94e06971d811b9d905048e164cb78355f8cd087219b5b8ff6dab2fbd9c user-gnome-clocks.service b009a1494f84705dcbea664823e24fb18f326ca84017d9c470ef55c0225d519993aacacf76b24c895ee926dbc2b3269ebc6b2a353cda5ad1b732af5624941a6a system-hexagonrpcd-sdsp.service af0e416f78ab317fe09813de58b446e5178457992ea4a2da2eb128811045201087d847e1b7ac0447a59c20129a736135e5d76b113262aa1f76b994e77b9c6b42 system-iio-sensor-proxy.d-hexagonrpcd.conf d12ebe6e7db2a8e34baab640dd4e2ea9cd01bc19054adf32d55528a6b27f71c2006ac2d65a58c98e21ed598e9cc66bfe79e197d20ed9d13f866a5a6cd3e247d5 system-iio-sensor-proxy.service +df3388cb7b9d035e54b34d8f8a6594be89c3015f979fe3bdc199fb7db1ab0bef821d6b306eecdf978eb227454d5e50aab29ac02d9722b1b075ec0ce4705e3518 system-iwd.service +873b53592786a978659bda8d32de5ed9a9f163ca298c4f4112f10bf635a8170c4060cc15b57ff72b3afd50075cd1c5dbc10030f00b166e2540397da9e1c5e46b user-mmsd-tng.service 5eab6a59c81232b188df45482e325b2d1cb9e038ca147a1b6983c1c095d8194fba804793c5e291b201a820976c8f506aadd2daf7c52fe573a3af708fc9984641 system-ModemManager.service d41d0aa1d4d577cd718185399c95055c0511d4aeb902c771ccec13655354aafc85c3f270431fd3debc7e05f0a8cbdb90f1969b673ae7e5310c1f46cb8120e3f2 system-nftables.service fa445c4a53214524baed4e9c52a5463592a074f88a5a286eacb60d0907c0545f725afde23abd68cf611067add80c2ccb289a381fc5ff6a5f654ea49c81f02fe8 system-sshd.service diff --git a/extra-repos/systemd/systemd-services/system-geoclue.service b/extra-repos/systemd/systemd-services/system-geoclue.service new file mode 100644 index 000000000..275cce157 --- /dev/null +++ b/extra-repos/systemd/systemd-services/system-geoclue.service @@ -0,0 +1,31 @@ +[Unit] +Description=Location Lookup Service + +[Service] +Type=dbus +BusName=org.freedesktop.GeoClue2 +User=geoclue +Environment="GSETTINGS_BACKEND=memory" +ExecStart=/usr/libexec/geoclue + +# Filesystem lockdown +ProtectSystem=strict +ProtectKernelTunables=true +ProtectControlGroups=true +ProtectHome=true +PrivateTmp=true + +# Network +PrivateNetwork=false + +# Execute Mappings +MemoryDenyWriteExecute=true + +# Modules +ProtectKernelModules=true + +# Real-time +RestrictRealtime=true + +# Privilege escalation +NoNewPrivileges=true diff --git a/extra-repos/systemd/systemd-services/system-iwd.service b/extra-repos/systemd/systemd-services/system-iwd.service new file mode 100644 index 000000000..8b401af22 --- /dev/null +++ b/extra-repos/systemd/systemd-services/system-iwd.service @@ -0,0 +1,29 @@ +[Unit] +Description=Wireless service +Documentation=man:iwd(8) man:iwd.config(5) man:iwd.network(5) man:iwd.ap(5) +After=network-pre.target +Before=network.target +Wants=network.target + +[Service] +Type=dbus +BusName=net.connman.iwd +ExecStart=/usr/libexec/iwd +NotifyAccess=main +LimitNPROC=1 +Restart=on-failure +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE +PrivateTmp=true +NoNewPrivileges=true +DevicePolicy=closed +DeviceAllow=/dev/rfkill rw +ProtectHome=yes +ProtectSystem=strict +ProtectControlGroups=yes +ProtectKernelModules=yes +ConfigurationDirectory=iwd +StateDirectory=iwd +StateDirectoryMode=0700 + +[Install] +WantedBy=multi-user.target diff --git a/extra-repos/systemd/systemd-services/user-gnome-clocks.service b/extra-repos/systemd/systemd-services/user-gnome-clocks.service new file mode 100644 index 000000000..bb475bcee --- /dev/null +++ b/extra-repos/systemd/systemd-services/user-gnome-clocks.service @@ -0,0 +1,11 @@ +[Unit] +Description=GNOME clocks + +[Service] +Type=dbus +BusName=org.gnome.clocks +ExecStart=/usr/bin/gnome-clocks -b +Restart=on-failure + +[Install] +WantedBy=graphical-session.target diff --git a/extra-repos/systemd/systemd-services/user-mmsd-tng.service b/extra-repos/systemd/systemd-services/user-mmsd-tng.service new file mode 100644 index 000000000..535fbdd08 --- /dev/null +++ b/extra-repos/systemd/systemd-services/user-mmsd-tng.service @@ -0,0 +1,10 @@ +[Unit] +Description=Multimedia Messaging Service Daemon + +[Service] +Type=simple +ExecStart=/usr/bin/mmsdtng +Restart=on-failure + +[Install] +WantedBy=default.target diff --git a/extra-repos/systemd/systemd-services/user-mpris-proxy.service b/extra-repos/systemd/systemd-services/user-mpris-proxy.service new file mode 100644 index 000000000..3ca16335d --- /dev/null +++ b/extra-repos/systemd/systemd-services/user-mpris-proxy.service @@ -0,0 +1,11 @@ +[Unit] +Description=Forward bluetooth midi controls via mpris2 so they are picked up by supporting media players +Requires=dbus.service bluetooth.target +After=dbus.service bluetooth.target + +[Service] +Type=simple +ExecStart=/usr/bin/mpris-proxy + +[Install] +WantedBy=default.target