From 7be817cf16e26ecc78a4e6fe5adf0ade204000c3 Mon Sep 17 00:00:00 2001 From: Jan Vcelak <jvcelak@fedoraproject.org> Date: Tue, 20 Jan 2015 00:10:28 +0100 Subject: [PATCH] service file: remove bounding capabilities --- knot.service | 5 ++--- knot.spec | 7 ++++++- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/knot.service b/knot.service index fdce752..431dc2d 100644 --- a/knot.service +++ b/knot.service @@ -1,6 +1,5 @@ [Unit] Description=Knot DNS server daemon -After=network.target [Service] Type=notify @@ -9,8 +8,8 @@ ExecReload=/usr/sbin/knotc reload Restart=on-abort ExecStartPre=/usr/sbin/knotc checkconf -CapabilityBoundingSet=cap_net_bind_service cap_setuid cap_setgid +# Breaks daemon reload +#CapabilityBoundingSet=cap_net_bind_service cap_setuid cap_setgid [Install] WantedBy=multi-user.target -Alias=knotd.service diff --git a/knot.spec b/knot.spec index c5d4a37..15c0e3b 100644 --- a/knot.spec +++ b/knot.spec @@ -8,7 +8,7 @@ Summary: An authoritative DNS daemon Name: knot Version: 1.6.1 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv3 Group: System Environment/Daemons URL: http://www.knot-dns.cz @@ -106,6 +106,11 @@ exit 0 %{_mandir}/man8/* %changelog +* Tue Jan 20 2015 Jan Vcelak <jvcelak@fedoraproject.org> 1.6.1-3 +- service file changes: + + remove dependency on network.target + + remove bounding capabilities (breaks reload) + * Sat Dec 13 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.6.1-2 - new upstream release: + DNSSEC: support for Single-Type Signing Scheme