From 006733c3c1b60f21ebd60cf9a9f3bad6dddaeedb Mon Sep 17 00:00:00 2001 From: Paul Wouters Date: Mon, 20 Apr 2020 09:46:34 -0400 Subject: [PATCH 1/2] - Resolves: rhbz#1825812 AVC avc: denied { dac_override } for comm="ods-enforcerd --- ods-enforcerd.service | 4 +++- ods-signerd.service | 4 +++- opendnssec.spec | 5 ++++- 3 files changed, 10 insertions(+), 3 deletions(-) diff --git a/ods-enforcerd.service b/ods-enforcerd.service index b660d86..0a3d95b 100644 --- a/ods-enforcerd.service +++ b/ods-enforcerd.service @@ -4,7 +4,9 @@ After=syslog.target network.target [Service] Type=forking -PIDFile=/var/run/opendnssec/enforcerd.pid +User=ods +Group=ods +PIDFile=/run/opendnssec/enforcerd.pid EnvironmentFile=-/etc/sysconfig/ods ExecStart=/usr/sbin/ods-enforcerd $ODS_ENFORCERD_OPT diff --git a/ods-signerd.service b/ods-signerd.service index a7b7034..c2218a8 100644 --- a/ods-signerd.service +++ b/ods-signerd.service @@ -4,7 +4,9 @@ After=syslog.target network.target ods-enforcerd [Service] Type=simple -PIDFile=/var/run/opendnssec/signerd.pid +User=ods +Group=ods +PIDFile=/run/opendnssec/signerd.pid EnvironmentFile=-/etc/sysconfig/ods ExecStart=/usr/sbin/ods-signerd -d $ODS_SIGNERD_OPT diff --git a/opendnssec.spec b/opendnssec.spec index 736f599..3ae3ddc 100644 --- a/opendnssec.spec +++ b/opendnssec.spec @@ -4,7 +4,7 @@ Summary: DNSSEC key and zone management software Name: opendnssec Version: 2.1.6 -Release: 4%{?prever}%{?dist} +Release: 5%{?prever}%{?dist} License: BSD Url: http://www.opendnssec.org/ Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz @@ -182,6 +182,9 @@ ods-enforcer update all >/dev/null 2>/dev/null ||: %systemd_postun_with_restart ods-signerd.service %changelog +* Mon Apr 20 2020 Paul Wouters - 2.1.6-5 +- Resolves: rhbz#1825812 AVC avc: denied { dac_override } for comm="ods-enforcerd + * Wed Mar 11 2020 Paul Wouters - 2.1.6-4 - Fix migration check to not attempt to check on first install with no db From 18a4866e30555678dadfdc8e729a6affb263c645 Mon Sep 17 00:00:00 2001 From: Paul Wouters Date: Thu, 28 May 2020 13:35:25 -0400 Subject: [PATCH 2/2] - Resolves: rhbz#1833718 ods-signerd.service missing .service --- ods-signerd.service | 2 +- opendnssec.spec | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/ods-signerd.service b/ods-signerd.service index c2218a8..49b50b5 100644 --- a/ods-signerd.service +++ b/ods-signerd.service @@ -1,6 +1,6 @@ [Unit] Description=OpenDNSSEC signer daemon -After=syslog.target network.target ods-enforcerd +After=syslog.target network.target ods-enforcerd.service [Service] Type=simple diff --git a/opendnssec.spec b/opendnssec.spec index 3ae3ddc..178aea8 100644 --- a/opendnssec.spec +++ b/opendnssec.spec @@ -4,7 +4,7 @@ Summary: DNSSEC key and zone management software Name: opendnssec Version: 2.1.6 -Release: 5%{?prever}%{?dist} +Release: 6%{?prever}%{?dist} License: BSD Url: http://www.opendnssec.org/ Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz @@ -182,6 +182,9 @@ ods-enforcer update all >/dev/null 2>/dev/null ||: %systemd_postun_with_restart ods-signerd.service %changelog +* Thu May 28 2020 Paul Wouters - 2.1.6-6 +- Resolves: rhbz#1833718 ods-signerd.service missing .service + * Mon Apr 20 2020 Paul Wouters - 2.1.6-5 - Resolves: rhbz#1825812 AVC avc: denied { dac_override } for comm="ods-enforcerd