From 6cbb8d42e363de27b7957c69c368c61b57ea93bb Mon Sep 17 00:00:00 2001 From: Damian Wolgast Date: Fri, 12 Mar 2021 12:15:49 +0100 Subject: [PATCH] Added prerm to revoke service permissions --- .github/workflows/deb-packaging.yml | 1 + Build/deb-meta/DEBIAN/prerm | 7 +++++++ 2 files changed, 8 insertions(+) create mode 100644 Build/deb-meta/DEBIAN/prerm diff --git a/.github/workflows/deb-packaging.yml b/.github/workflows/deb-packaging.yml index 77b318c8..2a4fbfaa 100644 --- a/.github/workflows/deb-packaging.yml +++ b/.github/workflows/deb-packaging.yml @@ -34,6 +34,7 @@ jobs: cp -R Build/deb-meta/* packaging/ chmod 755 packaging/DEBIAN/postinst chmod 755 packaging/DEBIAN/postrm + chmod 755 packaging/DEBIAN/prerm - name: Move artifacts to packaging directory run: cp -R Source/MQTTnet.Server/bin/Release/net5.0/linux-x64/publish/* packaging/opt/MQTTnetServer diff --git a/Build/deb-meta/DEBIAN/prerm b/Build/deb-meta/DEBIAN/prerm new file mode 100644 index 00000000..4afcd3b4 --- /dev/null +++ b/Build/deb-meta/DEBIAN/prerm @@ -0,0 +1,7 @@ +#!/bin/bash + +BASEPATH=/opt +INSTALLPATH=$BASEPATH/MQTTnetServer + +# Remove permission to open ports +setcap CAP_NET_BIND_SERVICE=-eip $INSTALLPATH/MQTTnet.Server \ No newline at end of file