WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-10-01 22:24:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Disable ProtectKernelTunables again

Browse Source 
This option was removed in https://github.com/NLnetLabs/unbound/commit/ff8fd0be5c529e7a1b84e8c74426e9c531c0a8f8 but reintroduced in https://github.com/NLnetLabs/unbound/commit/c32b9e4ba95983146eac805719db720f02a64358

Disable it with commentary in hope to prevent slipping it in again.
This commit is contained in:
Maryse47
2021-11-03 13:05:11 +00:00
committed by GitHub
parent 1a94a68fc2
commit 8eb5010104
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/unbound.service.in
+2 -1
View File
@@ -64,7 +64,8 @@ ProtectClock=true
ProtectControlGroups=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
# This breaks using socket options like 'so-rcvbuf'. Explicitly disable for visibility.
ProtectKernelTunables=false
ProtectProc=invisible
ProtectSystem=strict
RuntimeDirectory=unbound