414eaacd90
Until now unbound was always running as root by default. A DNS resolver can easily run under a non-privileged user. Signed-off-by: Michael Hanselmann <public@hansmi.ch>
20 lines
455 B
Bash
Executable file
20 lines
455 B
Bash
Executable file
#!/bin/sh /etc/rc.common
|
|
# Copyright (C) 2016 Michael Hanselmann
|
|
|
|
START=61
|
|
|
|
USE_PROCD=1
|
|
|
|
start_service() {
|
|
find /etc/unbound \! \( -user unbound -group unbound \) \
|
|
-exec chown unbound:unbound {} \;
|
|
|
|
find /etc/unbound \( -perm +027 -o \! -perm -600 \) \
|
|
-exec chmod u=rwX,g=rX,o= {} \;
|
|
|
|
procd_open_instance
|
|
procd_set_param command /usr/sbin/unbound
|
|
procd_append_param command -d # don't daemonize
|
|
procd_set_param respawn
|
|
procd_close_instance
|
|
}
|