Add missing CAP_SETGID and CAP_SETUID to the IXFRDist systemD unit file

diff --git a/pdns/ixfrdist.service.in b/pdns/ixfrdist.service.in
index 8f7c8e454d7fca5338a7baa986780911d4f6ef09..8761c66b4c93e54a9df5d50f980d8203dadf4a73 100644 (file)
--- a/pdns/ixfrdist.service.in
+++ b/pdns/ixfrdist.service.in
@@ -14,7 +14,7 @@ RestartSec=1
 StartLimitInterval=0
 PrivateTmp=true
 PrivateDevices=true
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID
 NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true