From: Ruben Kerkhof <ruben@rubenkerkhof.com>
Date: Wed, 4 Feb 2015 10:16:33 +0000 (+0100)
Subject: Restrict address families that can be used
X-Git-Tag: dnsdist-1.0.0-alpha1~306^2~4^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=631d0ef4cc047fe9ce71d2d11e7f9cd5a1756974;p=thirdparty%2Fpdns.git

Restrict address families that can be used

To AF_UNIX AF_INET and AF_INET6.
---

diff --git a/contrib/systemd-pdns-recursor.service b/contrib/systemd-pdns-recursor.service
index 152763e196..1259ebcdd9 100644
--- a/contrib/systemd-pdns-recursor.service
+++ b/contrib/systemd-pdns-recursor.service
@@ -13,6 +13,7 @@ CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 
 [Install]
 WantedBy=multi-user.target