- Fix #1229: Systemd service sandboxing, options in wrong sections.

git-svn-id: file:///svn/unbound/trunk@4078 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/contrib/unbound.service.in b/contrib/unbound.service.in
index e5b716c61e29025a3dc5410d459e565c6b0fca2d..3ddadfa95ee2b2e37dd7452bea470a0491c92add 100644 (file)
--- a/contrib/unbound.service.in
+++ b/contrib/unbound.service.in
@@ -1,13 +1,15 @@
-[Service]
-Type=notify
-NotifyAccess=main
-ExecStart=/home/vagrant/unbound_systemd/unbound
-ExecReload=/bin/kill -HUP $MAINPID
+[Unit]
+Description=Validating, recursive, and caching DNS resolver
+Documentation=man:unbound(8)
 
 [Install]
 WantedBy=multi-user.target
 
-[Unit]
+[Service]
+ExecReload=/bin/kill -HUP $MAINPID
+ExecStart=/home/vagrant/unbound_systemd/unbound
+NotifyAccess=main
+Type=notify
 CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT
 MemoryDenyWriteExecute=true
 NoNewPrivileges=true

diff --git a/doc/Changelog b/doc/Changelog
index f495c7b66f026ce5b22d6f54b5d20b60294ca7ed..fa4899420f5165e95ff436c1098add0db5460af9 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -2,6 +2,7 @@
        - Fix #1238: segmentation fault when adding through the remote
          interface a per-view local zone to a view with no previous
          (configured) local zones.
+       - Fix #1229: Systemd service sandboxing, options in wrong sections.
 
 21 March 2017: Ralph
        - Merge EDNS Client subnet implementation from feature branch into main