[Pkg-freeradius-maintainers] Bug#985967: freeradius: Fails to start with permission denied when configuring to use privileged ports

[Thore Kruess]

Package: freeradius
Version: 3.0.21+dfsg-2+b2
Severity: important
X-Debbugs-Cc: thore at selfnet.de

Good evening,

after a test upgrade of my running buster configuration to bullseye I
can no longer start freeradius. 

Mar 26 23:46:35 radius-user-dev-1 radiusd[14718]: Failed binding to dhcp
interface eth0 address 192.168.178.58 port 67 bound to server dhcp:
Permission denied
Mar 26 23:46:35 radius-user-dev-1 radiusd[14718]:
/etc/freeradius/3.0/sites-enabled/selfnet-dhcp[41]: Error binding to
port for 192.168.178.58 port 67
Mar 26 23:46:35 radius-user-dev-1 systemd[1]: freeradius.service: Main
process exited, code=exited, status=1/FAILURE

I assume this is related to the changes in the systemd unit so I added

cat /etc/systemd/system/freeradius.service.d/override.conf
[Service]
CapabilityBoundingSet = CAP_NET_ADMIN CAP_NET_BIND_SERVICE
CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN
CAP_DAC_OVERRIDE

systemd show confirms this parameter to be set, but I see the same error
as above.

Best regards,
Thore

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-security
  APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-5-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freeradius depends on:
ii  freeradius-common  3.0.21+dfsg-2
ii  freeradius-config  3.0.21+dfsg-2+b2
ii  libc6              2.31-10
ii  libcrypt1          1:4.4.17-1
ii  libct4             1.2.3-1
ii  libfreeradius3     3.0.21+dfsg-2+b2
ii  libgdbm6           1.19-2
ii  libpam0g           1.4.0-7
ii  libperl5.32        5.32.1-3
ii  libreadline8       8.1-1
ii  libsqlite3-0       3.34.1-3
ii  libssl1.1          1.1.1j-1
ii  libsystemd0        247.3-3
ii  libtalloc2         2.3.1-2+b1
ii  libwbclient0       2:4.13.5+dfsg-1
ii  lsb-base           11.1.0

Versions of packages freeradius recommends:
ii  freeradius-utils  3.0.21+dfsg-2+b2

Versions of packages freeradius suggests:
pn  freeradius-krb5        <none>
pn  freeradius-ldap        <none>
pn  freeradius-mysql       <none>
ii  freeradius-postgresql  3.0.21+dfsg-2+b2
ii  freeradius-python3     3.0.21+dfsg-2+b2
pn  snmp                   <none>

-- no debconf information