diff options
| author | uvok cheetah | 2025-02-09 14:01:10 +0100 |
|---|---|---|
| committer | uvok cheetah | 2025-02-09 14:01:10 +0100 |
| commit | 51b69224c7e4bf3819dcb260f59e684c3b297cc9 (patch) | |
| tree | 1b3d21528be79b36f03cb469b93969a56f8a2964 /roles/linux-ns/files/systemd/dn42_pdns.service | |
| parent | a2ec10dbd30a17d2ede8ae8897d9245d748c0b3f (diff) | |
Update service files
restrictions
Diffstat (limited to 'roles/linux-ns/files/systemd/dn42_pdns.service')
| -rw-r--r-- | roles/linux-ns/files/systemd/dn42_pdns.service | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/roles/linux-ns/files/systemd/dn42_pdns.service b/roles/linux-ns/files/systemd/dn42_pdns.service index 86c61d1..45cc367 100644 --- a/roles/linux-ns/files/systemd/dn42_pdns.service +++ b/roles/linux-ns/files/systemd/dn42_pdns.service @@ -1,5 +1,3 @@ -# powerdns in namespace - [Unit] Description=PowerDNS Authoritative Server dn42 Documentation=man:pdns_server(1) man:pdns_control(1) @@ -19,6 +17,7 @@ Restart=on-failure RestartSec=1 StartLimitInterval=0 RuntimeDirectory=pdns-dn42 +BindReadOnlyPaths=/etc/netns/dn42/resolv.conf:/etc/resolv.conf # Sandboxing CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN |