pool/unbound
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1140878 from home:onlyJak0b:branches:server:dns

Browse Source 
- Use prefixes instead of sudo in unbound.service (boo#1215628)

OBS-URL: https://build.opensuse.org/request/show/1140878
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=171
This commit is contained in:
Jorik Cronenberg 2024-03-05 10:01:54 +00:00 committed by Git OBS Bridge
parent 7cb2902336
commit 2fa50e9f92
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
unbound.changes
View File

@ -7,6 +7,11 @@ Wed Feb 28 13:35:31 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
exploited to exhaust CPU resources and stall DNS resolvers.
- Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
-------------------------------------------------------------------
Tue Jan 23 09:32:21 UTC 2024 - Jakob Lorenz <onlyjak0b@mailbox.org>
- Use prefixes instead of sudo in unbound.service (boo#1215628)
-------------------------------------------------------------------
Fri Nov 17 09:50:18 UTC 2023 - Pedro Monreal <pmonreal@suse.com>

6
unbound.service
View File

@ -9,11 +9,13 @@ Wants=nss-lookup.target
[Service]
Type=simple
User=unbound
Group=unbound
EnvironmentFile=-/etc/sysconfig/unbound
#ExecStartPre=/sbin/runuser --shell /bin/sh -c "/usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem" unbound
ExecStartPre=/usr/bin/sudo -u unbound /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem
ExecStartPre=/usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem
ExecStartPre=/usr/sbin/unbound-checkconf
ExecStart=/usr/sbin/unbound -d $UNBOUND_OPTIONS
ExecStart=!/usr/sbin/unbound -d $UNBOUND_OPTIONS
[Install]
WantedBy=multi-user.target