FS#52700 - [unbound] Use systemd parameters for sandboxing

Attached to Project: Community Packages
Opened by rdeckard (rdeckard) - Tuesday, 24 January 2017, 21:12 GMT
Last edited by Gaetan Bisson (vesath) - Wednesday, 15 February 2017, 04:35 GMT
Task Type Feature Request
Category Packages
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Several options can be added to the Arch-provided service file to help sandbox unbound. See https://wiki.archlinux.org/index.php/Unbound#Sandboxing
This task depends upon

Closed by  Gaetan Bisson (vesath)
Wednesday, 15 February 2017, 04:35 GMT
Reason for closing:  Upstream
Comment by Gaetan Bisson (vesath) - Wednesday, 25 January 2017, 18:17 GMT
The wiki says "This section is being considered for removal. Reason: If the service works, propose it upstream."

I could not agree more. Could you please ask upstream if they'd be interested in maintaining a full-featured systemd service file. I notice they've already got an initscripts file under contrib/ as well a stuff that's even more distro specific (like a Fedora spec file).

If upstream is unwilling to take the service file, I'll incorporate the suggested improvements in our package, but it'd really benefit all systemd-based distro to have this file upstream.

Cheers.

Loading...