[Pkg-freeradius-maintainers] Bug#985967: freeradius: Fails to start with permission denied when configuring to use privileged ports

[Thore Krüss]

Thank you for the suggestion.

This did indeed fix it. freeradius does bind to the port and doesn't 
crash any more.

Is there a simple way to get this comment in the systemd unit updated or 
document somewhere that it needs this kind of override to use the dhcp 
server?

Best regrads
Thore


On 7/10/21 11:24 AM, Adrian Bunk wrote:
> On Sat, Mar 27, 2021 at 12:39:15AM +0100, Thore Kruess wrote:
>> ...
>> cat /etc/systemd/system/freeradius.service.d/override.conf
>> [Service]
>> CapabilityBoundingSet = CAP_NET_ADMIN CAP_NET_BIND_SERVICE
>> CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN
>> CAP_DAC_OVERRIDE
>>
>> systemd show confirms this parameter to be set, but I see the same error
>> as above.
> 
> Does AmbientCapabilities instead of CapabilityBoundingSet help?
> 
>> Best regards,
>> Thore
> 
> cu
> Adrian
>