]> git.ipfire.org Git - thirdparty/unbound.git/commit
projects / thirdparty / unbound.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 55bb4c1) | patch
Drop CAP_KILL, use + prefix for ExecReload= instead 87/head
authorPascal Ernster <github@hardfalcon.net>
Thu, 26 Sep 2019 08:41:37 +0000 (08:41 +0000)
committerGitHub <noreply@github.com>
Thu, 26 Sep 2019 08:41:37 +0000 (08:41 +0000)
commit11f22074a9b7ed76316373146f528d1b792c4527
tree31cdc586bb80167a0586140f5457c018a25cdeb5tree
parent55bb4c12753e0744ae03d9296240a6dd85a3e1b2commit | diff
Drop CAP_KILL, use + prefix for ExecReload= instead

CAP_KILL seems a bit too much privileges for the sole purpose of being able to make ExecReload= work.
Use the + prefix on ExecReload= instead to run "/bin/kill -HUP $MAINPID" with full privileges, ignoring the restrictions from CapabilityBoundingSet=.

See https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStart= for further details about the + prefix in ExecReload=.
contrib/unbound.service.in diff | blob | blame | history
Mirror of https://github.com/NLnetLabs/unbound.git