systemd/tmpfiles: change directory owner to root

Change the owner of kresd files to root:knot-resolver. This improves
behaviour for Fedora, where kresd can run under root (e.g. in Docker).
Otherwise, running kresd as root on Fedora would fail because of dropped
capabilities and attempting to access /var/lib/knot-resolver, which was
owned by knot-resolver.

This change makes it possible for both root (user) and knot-resolver
(group) to have the same permissions on these directories despite
dropped capabilities.

diff --git a/systemd/tmpfiles.d/knot-resolver.conf.in b/systemd/tmpfiles.d/knot-resolver.conf.in
index 204088de772947be121eb9e46d183ea29f80cb95..5353a852231d98ed864639be7e2992925835439e 100644 (file)
--- a/systemd/tmpfiles.d/knot-resolver.conf.in
+++ b/systemd/tmpfiles.d/knot-resolver.conf.in
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: CC0-1.0
 # tmpfiles.d(5) directories for knot-resolver (kresd)
 #Type Path                            Mode UID           GID          Age Argument
-    d @run_dir@                       0750 @user@        @group@       -   -
-    d @systemd_work_dir@              0750 @user@        @group@       -   -
-    d @systemd_cache_dir@             0750 @user@        @group@       -   -
+    d @run_dir@                       0770 root          @group@       -   -
+    d @systemd_work_dir@              0770 root          @group@       -   -
+    d @systemd_cache_dir@             0770 root          @group@       -   -