[knot/epel7] default config: run server as unprivileged user

jvcelak jvcelak at fedoraproject.org
Thu Oct 30 16:33:31 UTC 2014


commit b0bf798c436f8d3d8bddb28684f762d497dc71a5
Author: Jan Vcelak <jvcelak at fedoraproject.org>
Date:   Thu Oct 30 17:27:13 2014 +0100

    default config: run server as unprivileged user

 knot.conf |    1 +
 knot.spec |    5 ++++-
 2 files changed, 5 insertions(+), 1 deletions(-)
---
diff --git a/knot.conf b/knot.conf
index f364110..8923397 100644
--- a/knot.conf
+++ b/knot.conf
@@ -4,6 +4,7 @@
 
 system {
 	rundir "/var/run/knot";
+	user knot.knot;
 }
 
 interfaces {
diff --git a/knot.spec b/knot.spec
index 31c2ee7..ef2fae7 100644
--- a/knot.spec
+++ b/knot.spec
@@ -8,7 +8,7 @@
 Summary: An authoritative DNS daemon
 Name: knot
 Version: 1.6.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPLv3
 Group: System Environment/Daemons
 URL: http://www.knot-dns.cz
@@ -106,6 +106,9 @@ exit 0
 %{_mandir}/man8/*
 
 %changelog
+* Thu Oct 30 2014 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.0-2
+- default config: run server as unprivileged user
+
 * Thu Oct 23 2014 Jan Vcelak <jvcelak at fedoraproject.org> 1.6.0-1
 - new upstream release:
   + support for persistent zone timers (expire, refresh, and flush)


More information about the scm-commits mailing list