Merge pull request #674 from HathorNetwork/master

Continue release-candidate for v0.30.0-rc.2

build_resources/linux/after-install.tpl

@@ -0,0 +1,66 @@
+#!/bin/bash
+set -eu
+
+###
+# Default after-install.tpl copied from electron-builder.
+# https://github.com/electron-userland/electron-builder/blob/v24.4.0/packages/app-builder-lib/templates/linux/after-install.tpl
+###
+
+# SUID chrome-sandbox for Electron 5+
+chmod 4755 '/opt/${sanitizedProductName}/chrome-sandbox' || true
+
+# update-mime-database and update-desktop-database might be missing from minimal variants of some
+# Linux distributions.
+if hash update-mime-database 2>/dev/null; then
+  update-mime-database /usr/share/mime || true
+fi
+if hash update-desktop-database 2>/dev/null; then
+  update-desktop-database /usr/share/applications || true
+fi
+
+
+###
+# Custom after-install.tpl script.
+###
+
+APP="/opt/${sanitizedProductName}"
+BIN=/usr/local/bin
+
+# Link to the Electron app binary.
+if type update-alternatives 2>/dev/null >&1; then
+  # Remove previous link if it doesn't use update-alternatives
+  if [ -L "$BIN/${executable}" -a -e "$BIN/${executable}" -a "`readlink "$BIN/${executable}"`" != "/etc/alternatives/${executable}" ]; then
+    rm -f "$BIN/${executable}"
+  fi
+  update-alternatives --install "$BIN/${executable}" "${executable}" "$APP/${executable}" 100 || ln -sf "$APP/${executable}" "$BIN/${executable}"
+else
+  ln -sf "$APP/${executable}" "$BIN/${executable}"
+fi
+
+APPARMOR_PROFILE_SOURCE="$APP/resources/apparmor-profile"
+APPARMOR_PROFILE_TARGET="/etc/apparmor.d/hathor-wallet"
+
+# Install apparmor profile.
+# First check if the version of AppArmor running on the device supports our profile.
+# This is in order to keep backwards compatibility with Ubuntu 22.04 which does not support abi/4.0.
+# In that case, we just skip installing the profile since the app runs fine without it on 22.04.
+#
+# Those apparmor_parser flags are akin to performing a dry run of loading a profile.
+# https://wiki.debian.org/AppArmor/HowToUse#Dumping_profiles
+#
+# Unfortunately, at the moment AppArmor doesn't have a good story for backwards compatibility.
+# https://askubuntu.com/questions/1517272/writing-a-backwards-compatible-apparmor-profile
+if test -d "/etc/apparmor.d"; then
+  if apparmor_parser --skip-kernel-load --debug "$APPARMOR_PROFILE_SOURCE" > /dev/null 2>&1; then
+    cp -f "$APPARMOR_PROFILE_SOURCE" "$APPARMOR_PROFILE_TARGET"
+
+    if hash apparmor_parser 2>/dev/null; then
+      # Extra flags taken from dh_apparmor:
+      # > By using '-W -T' we ensure that any abstraction updates are also pulled in.
+      # https://wiki.debian.org/AppArmor/Contribute/FirstTimeProfileImport
+      apparmor_parser --replace --write-cache --skip-read-cache "$APPARMOR_PROFILE_TARGET"
+    fi
+  else
+    echo "Skipping the installation of the AppArmor profile as this version of AppArmor does not seem to support the profile bundled with Hathor Wallet."
+  fi
+fi

build_resources/linux/after-remove.tpl

@@ -0,0 +1,9 @@
+#!/bin/bash
+set -eu
+
+APPARMOR_PROFILE_DEST="/etc/apparmor.d/hathor-wallet"
+
+# Remove apparmor profile.
+if [ -f "$APPARMOR_PROFILE_DEST" ]; then
+  rm -f "$APPARMOR_PROFILE_DEST"
+fi

build_resources/linux/apparmor-profile

@@ -0,0 +1,9 @@
+abi <abi/4.0>,
+include <tunables/global>
+
+profile hathor-wallet /opt/Hathor\ Wallet/hathor-wallet flags=(default_allow) {
+  userns,
+
+  # Site-specific additions and overrides. See local/README for details.
+  include if exists <local/hathor-wallet>
+}

package.json

@@ -29,7 +29,7 @@
   },
   "private": true,
   "dependencies": {
-    "@hathor/wallet-lib": "1.10.0",
+    "@hathor/wallet-lib": "1.14.1",
     "@ledgerhq/hw-transport-node-hid": "6.28.1",
     "@reduxjs/toolkit": "2.2.3",
     "@sentry/electron": "3.0.7",
@@ -125,7 +125,20 @@
       "target": [
         "AppImage",
         "deb"
+      ],
+      "extraResources": [
+        {
+          "from": "build_resources/linux/apparmor-profile",
+          "to": "./apparmor-profile"
+        }
       ]
+    },
+    "deb": {
+      "afterInstall": "build_resources/linux/after-install.tpl",
+      "afterRemove": "build_resources/linux/after-remove.tpl"
+    },
+    "directories": {
+      "buildResources": "build_resources"
     }
   },
   "browserslist": [