From: Andrea Tosatto <andrea.tosy@gmail.com>
Date: Tue, 20 Feb 2018 14:34:41 +0000 (+0100)
Subject: Add missing CAP_SETGID and CAP_SETUID to the IXFRDist systemD unit file
X-Git-Tag: dnsdist-1.3.0~94^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=afa0d59296ccc1b78c70f40ec5d2b665f9066a6d;p=pdns

Add missing CAP_SETGID and CAP_SETUID to the IXFRDist systemD unit file
---

diff --git a/pdns/ixfrdist.service.in b/pdns/ixfrdist.service.in
index 8f7c8e454..8761c66b4 100644
--- a/pdns/ixfrdist.service.in
+++ b/pdns/ixfrdist.service.in
@@ -14,7 +14,7 @@ RestartSec=1
 StartLimitInterval=0
 PrivateTmp=true
 PrivateDevices=true
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID
 NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true