mirror of
https://github.com/NLnetLabs/unbound.git
synced 2026-02-11 23:05:46 -05:00
- Fix #1265: contrib/unbound.service contains hardcoded path.
git-svn-id: file:///svn/unbound/trunk@4171 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
parent
a40e8ae321
commit
0d271cbb09
2 changed files with 7 additions and 4 deletions
|
|
@ -6,8 +6,8 @@ Documentation=man:unbound(8)
|
|||
WantedBy=multi-user.target
|
||||
|
||||
[Service]
|
||||
ExecReload=/bin/kill -HUP $MAINPID
|
||||
ExecStart=/home/vagrant/unbound_systemd/unbound
|
||||
ExecReload=@bindir@/kill -HUP $MAINPID
|
||||
ExecStart=@sbindir@/unbound
|
||||
NotifyAccess=main
|
||||
Type=notify
|
||||
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT
|
||||
|
|
@ -20,7 +20,7 @@ ProtectControlGroups=true
|
|||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectSystem=strict
|
||||
ReadWritePaths=/etc/unbound /run
|
||||
ReadWritePaths=@sysconfdir@ @localstatedir@ /run
|
||||
RestrictAddressFamilies=AF_INET AF_UNIX
|
||||
RestrictRealtime=true
|
||||
SystemCallArchitectures=native
|
||||
|
|
|
|||
|
|
@ -1,4 +1,7 @@
|
|||
16 May 2017: George
|
||||
17 May 2017: Wouter
|
||||
- Fix #1265: contrib/unbound.service contains hardcoded path.
|
||||
|
||||
17 May 2017: George
|
||||
- Use qstate's region for IPSECKEY rrset (ipsecmod).
|
||||
|
||||
16 May 2017: George
|
||||
|
|
|
|||
Loading…
Reference in a new issue