WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-08-17 21:25:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add kill capability to systemd service file

Browse Source 
The ExecReload command calls kills on a process owned by the unbound user (or whatever user is configured). To do so, it needs the CAP_KILL capability.
This commit is contained in:
sam-lunt
2019-09-21 14:36:12 -05:00
committed by GitHub
parent f635b47ade
commit 6943cab670
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/unbound.service.in
+1 -1
View File
@@ -13,7 +13,7 @@ ExecReload=/bin/kill -HUP $MAINPID
ExecStart=@UNBOUND_SBIN_DIR@/unbound -d
NotifyAccess=main
Type=notify
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_SYS_RESOURCE CAP_NET_RAW
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_SYS_RESOURCE CAP_NET_RAW CAP_KILL
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true