From afa0d59296ccc1b78c70f40ec5d2b665f9066a6d Mon Sep 17 00:00:00 2001
From: Andrea Tosatto <andrea.tosy@gmail.com>
Date: Tue, 20 Feb 2018 15:34:41 +0100
Subject: [PATCH] Add missing CAP_SETGID and CAP_SETUID to the IXFRDist systemD
 unit file

---
 pdns/ixfrdist.service.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pdns/ixfrdist.service.in b/pdns/ixfrdist.service.in
index 8f7c8e454d..8761c66b4c 100644
--- a/pdns/ixfrdist.service.in
+++ b/pdns/ixfrdist.service.in
@@ -14,7 +14,7 @@ RestartSec=1
 StartLimitInterval=0
 PrivateTmp=true
 PrivateDevices=true
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID
 NoNewPrivileges=true
 ProtectSystem=full
 ProtectHome=true
-- 
2.47.2