snowflake: mount default geoip paths

-metrics option requires access to these files to geolocate clients

Signed-off-by: matzfan <redacted>

diff --git a/net/snowflake/Makefile b/net/snowflake/Makefile
index f5951c189cdf6829c0e2a38c3111200329549db1..c045eb69150284913af0a7b98387cef94a51b0f4 100644 (file)
--- a/net/snowflake/Makefile
+++ b/net/snowflake/Makefile
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=snowflake
 PKG_VERSION:=2.11.0
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL=https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git

diff --git a/net/snowflake/files/snowflake-proxy.init b/net/snowflake/files/snowflake-proxy.init
index 3d8b4387d1a79811dbf067837163328a22f8d928..f9b97c0848604f93259e78f2837fe9efb1fbdbce 100644 (file)
--- a/net/snowflake/files/snowflake-proxy.init
+++ b/net/snowflake/files/snowflake-proxy.init
@@ -17,6 +17,9 @@ start_service() {
        [ -x /sbin/ujail ] && {
                procd_add_jail snowflake-proxy ronly
                procd_add_jail_mount /etc/ssl/certs
+               # change the following if specifying non default paths with the -geoipdb or -geoip6db command parameters 
+               procd_add_jail_mount /usr/share/tor/geoip
+               procd_add_jail_mount /usr/share/tor/geoip6
                procd_set_param no_new_privs 1
        }
        procd_close_instance