Add RuntimeDirectoryPreserve=yes to systemd service definitions

Control socket virtual servers typically create files in the runtime
directory.
If this is not kept, FreeRADIUS can't be started in debug mode if those
virtual servers are enabled.

diff --git a/debian/freeradius.service b/debian/freeradius.service
index 8886fc894bbbae2186e9344eea38ad13032d69f8..e1db1e5cc86f0a5ab5134a8ad40d58339ae85a45 100644 (file)
--- a/debian/freeradius.service
+++ b/debian/freeradius.service
@@ -46,6 +46,11 @@ RestartSec=5
 #  Don't elevate privileges after starting
 NoNewPrivileges=true
 
+# Control socket virtual servers typically create files in
+# the runtime directory.  If this is not kept, FreeRADIUS can't
+# be started in debug mode if those virtual servers are enabled.
+RuntimeDirectoryPreserve=yes
+
 # Allow binding to secure ports, broadcast addresses, and raw interfaces.
 #
 # As the process starts as an unprivileged user, we need to assign all capabilities that

diff --git a/redhat/radiusd.service b/redhat/radiusd.service
index 91d49b1dcfae81282c4c8aee8adb0eacd96be54c..e203f531b1c9e3295e36e697f5ca03f1d1b51cc8 100644 (file)
--- a/redhat/radiusd.service
+++ b/redhat/radiusd.service
@@ -39,6 +39,11 @@ RestartSec=5
 #  Don't elevate privileges after starting
 NoNewPrivileges=true
 
+# Control socket virtual servers typically create files in
+# the runtime directory.  If this is not kept, FreeRADIUS can't
+# be started in debug mode if those virtual servers are enabled.
+RuntimeDirectoryPreserve=yes
+
 # Allow binding to secure ports, broadcast addresses, and raw interfaces.
 #
 # As the process starts as an unprivileged user, we need to assign all capabilities that