swendel/nixpkgs
1
0
Fork 0
mirror of https://github.com/SebastianWendel/nixpkgs.git synced 2024-09-20 12:29:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #245327 from JohnAZoidberg/keyd-2.4.3

Browse source 
keyd: 2.4.2 -> 2.4.3
This commit is contained in:
Peder Bergebakken Sundt 2023-12-17 23:41:06 +01:00 committed by GitHub
parent 6946f33a2e 6591d332f9
commit 80beaf2b29
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/services/hardware/keyd.nix
View file

@ -143,7 +143,7 @@ in
RuntimeDirectory = "keyd";
# Hardening
CapabilityBoundingSet = "";
CapabilityBoundingSet = [ "CAP_SYS_NICE" ];
DeviceAllow = [
"char-input rw"
"/dev/uinput rw"
@ -152,7 +152,7 @@ in
PrivateNetwork = true;
ProtectHome = true;
ProtectHostname = true;
PrivateUsers = true;
PrivateUsers = false;
PrivateMounts = true;
PrivateTmp = true;
RestrictNamespaces = true;
@ -165,9 +165,9 @@ in
LockPersonality = true;
ProtectProc = "invisible";
SystemCallFilter = [
"nice"
"@system-service"
"~@privileged"
"~@resources"
];
RestrictAddressFamilies = [ "AF_UNIX" ];
RestrictSUIDSGID = true;

7
pkgs/tools/inputmethods/keyd/default.nix
View file

@ -8,13 +8,13 @@
}:
let
version = "2.4.2";
version = "2.4.3";
src = fetchFromGitHub {
owner = "rvaiya";
repo = "keyd";
rev = "v" + version;
hash = "sha256-QWr+xog16MmybhQlEWbskYa/dypb9Ld54MOdobTbyMo=";
hash = "sha256-NhZnFIdK0yHgFR+rJm4cW+uEhuQkOpCSLwlXNQy6jas=";
};
pypkgs = python3.pkgs;
@ -47,13 +47,14 @@ stdenv.mkDerivation {
postPatch = ''
substituteInPlace Makefile \
--replace DESTDIR= DESTDIR=${placeholder "out"} \
--replace /usr ""
substituteInPlace keyd.service \
--replace /usr/bin $out/bin
'';
installFlags = [ "DESTDIR=${placeholder "out"}" ];
buildInputs = [ systemd ];
enableParallelBuilding = true;