service file: remove bounding capabilities

This commit is contained in:
Jan Vcelak 2015-01-20 00:10:28 +01:00
parent 22f16959af
commit 7be817cf16
2 changed files with 8 additions and 4 deletions

View File

@ -1,6 +1,5 @@
[Unit]
Description=Knot DNS server daemon
After=network.target
[Service]
Type=notify
@ -9,8 +8,8 @@ ExecReload=/usr/sbin/knotc reload
Restart=on-abort
ExecStartPre=/usr/sbin/knotc checkconf
CapabilityBoundingSet=cap_net_bind_service cap_setuid cap_setgid
# Breaks daemon reload
#CapabilityBoundingSet=cap_net_bind_service cap_setuid cap_setgid
[Install]
WantedBy=multi-user.target
Alias=knotd.service

View File

@ -8,7 +8,7 @@
Summary: An authoritative DNS daemon
Name: knot
Version: 1.6.1
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv3
Group: System Environment/Daemons
URL: http://www.knot-dns.cz
@ -106,6 +106,11 @@ exit 0
%{_mandir}/man8/*
%changelog
* Tue Jan 20 2015 Jan Vcelak <jvcelak@fedoraproject.org> 1.6.1-3
- service file changes:
+ remove dependency on network.target
+ remove bounding capabilities (breaks reload)
* Sat Dec 13 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.6.1-2
- new upstream release:
+ DNSSEC: support for Single-Type Signing Scheme