File pdns-4.0.3_allow_dacoverride_in_capset.patch of Package pdns
Index: pdns-4.3.0-rc2/pdns/pdns.service.in =================================================================== --- pdns-4.3.0-rc2.orig/pdns/pdns.service.in +++ pdns-4.3.0-rc2/pdns/pdns.service.in @@ -16,8 +16,8 @@ StartLimitInterval=0 RuntimeDirectory=pdns # Sandboxing -CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN -AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN CAP_DAC_OVERRIDE +AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN CAP_DAC_OVERRIDE LockPersonality=true NoNewPrivileges=true PrivateDevices=true