Basti
b422d37fa2
The root-run package hook changed ownership of paths below a user-controlled home directory. A config symlink could redirect chown to an arbitrary root-owned file during installation or upgrade. Run the config writer as the target desktop user and remove the privileged ownership changes. This also prevents the missing-config path from writing through a user-controlled pathname as root. Add regression coverage and bump the package release. Reported-by: piratemoo (Esther) <22439214+piratemoo@users.noreply.github.com> Link: https://github.com/piratemoo/Arbitrary-File-Ownership-Change-via-Symlink-LPE
33 lines
1.2 KiB
Bash
33 lines
1.2 KiB
Bash
# Maintainer: Jacob Mink <Jacob[dot]Mink[at]Dell[dot]com>
|
|
|
|
pkgname=dell-xps-touchpad-haptics
|
|
pkgver=1.0.0
|
|
pkgrel=4
|
|
pkgdesc="Synaptics haptic touchpad presets for Dell XPS on Omarchy"
|
|
arch=('x86_64')
|
|
url="https://github.com/omacom-io/omarchy-pkgs"
|
|
license=('MIT')
|
|
depends=('python')
|
|
conflicts=('omarchy-dell-haptic-touchpad')
|
|
provides=('omarchy-dell-haptic-touchpad')
|
|
replaces=('omarchy-dell-haptic-touchpad')
|
|
install=dell-xps-touchpad-haptics.install
|
|
options=('!debug')
|
|
source=(
|
|
'99-dell-xps-touchpad-haptics.rules'
|
|
'README.package.md'
|
|
'dell-xps-touchpad-haptics'
|
|
'dell-xps-touchpad-haptics-daemon'
|
|
'dell-xps-touchpad-haptics.install'
|
|
'dell-xps-touchpad-haptics.service'
|
|
)
|
|
sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
|
|
|
|
package() {
|
|
install -Dm644 99-dell-xps-touchpad-haptics.rules "${pkgdir}/usr/lib/udev/rules.d/99-dell-xps-touchpad-haptics.rules"
|
|
install -Dm755 dell-xps-touchpad-haptics "${pkgdir}/usr/bin/dell-xps-touchpad-haptics"
|
|
install -Dm755 dell-xps-touchpad-haptics-daemon "${pkgdir}/usr/bin/dell-xps-touchpad-haptics-daemon"
|
|
install -Dm644 dell-xps-touchpad-haptics.service "${pkgdir}/usr/lib/systemd/system/dell-xps-touchpad-haptics.service"
|
|
install -Dm644 README.package.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
|
|
}
|