From: Ruben Kerkhof Date: Wed, 4 Feb 2015 10:16:33 +0000 (+0100) Subject: Restrict address families that can be used X-Git-Tag: dnsdist-1.0.0-alpha1~306^2~4^2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=631d0ef4cc047fe9ce71d2d11e7f9cd5a1756974;p=pdns Restrict address families that can be used To AF_UNIX AF_INET and AF_INET6. --- diff --git a/contrib/systemd-pdns-recursor.service b/contrib/systemd-pdns-recursor.service index 152763e19..1259ebcdd 100644 --- a/contrib/systemd-pdns-recursor.service +++ b/contrib/systemd-pdns-recursor.service @@ -13,6 +13,7 @@ CapabilityBoundingSet=CAP_NET_BIND_SERVICE NoNewPrivileges=true ProtectSystem=full ProtectHome=true +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 [Install] WantedBy=multi-user.target