pkg: danctnix: danctnix-tweaks: secfix - regenerate pacman gnupg keys

Signed-off-by: Danct12 <[email protected]>

PKGBUILDS/danctnix/danctnix-tweaks/PKGBUILD

@@ -1,12 +1,13 @@
 # Maintainer: Danct12 <[email protected]>
 
 pkgname=danctnix-tweaks
-pkgver=0.2
+pkgver=0.3
 pkgrel=1
 pkgdesc="Tweaks made to DanctNIX Mobile."
 arch=(any)
 url="https://danctnix.org"
 license=('MIT')
+install=$pkgname.install
 source=(00-journal-size.conf
         packagekit-rm-lock.service)
 

PKGBUILDS/danctnix/danctnix-tweaks/danctnix-tweaks.install

@@ -0,0 +1,11 @@
+post_upgrade() {
+  if [ "$(stat -c '%W' /etc/pacman.d/gnupg)" -lt 1624838400 ]; then
+    echo "Security fix: recreating gnupg keys for pacman"
+    echo "All systems before 2021/06/28 release shipped common private keys for pacman. Due to this vulnerability, all gnupg keys must be regenerated."
+    echo "This might take a while, please wait."
+
+    /usr/bin/rm -rf /etc/pacman.d/gnupg
+    /usr/bin/pacman-key --init
+    /usr/bin/pacman-key --populate archlinuxarm
+  fi
+}