]> granicus.if.org Git - pdns/commitdiff
Add missing CAP_SETGID and CAP_SETUID to the IXFRDist systemD unit file
authorAndrea Tosatto <andrea.tosy@gmail.com>
Tue, 20 Feb 2018 14:34:41 +0000 (15:34 +0100)
committerAndrea Tosatto <andrea.tosy@gmail.com>
Tue, 20 Feb 2018 14:34:41 +0000 (15:34 +0100)
pdns/ixfrdist.service.in

index 8f7c8e454d7fca5338a7baa986780911d4f6ef09..8761c66b4c93e54a9df5d50f980d8203dadf4a73 100644 (file)
@@ -14,7 +14,7 @@ RestartSec=1
 StartLimitInterval=0
 PrivateTmp=true
 PrivateDevices=true
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID
 NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true