[Pkg-freeradius-maintainers] [Git][debian/freeradius][master] 2 commits: Fix capabilities in service file

[Jochen Sprickerhof (@jspricke)]

Jochen Sprickerhof pushed to branch master at Debian / freeradius


Commits:
7354c89a by Jochen Sprickerhof at 2021-07-23T13:18:17+02:00
Fix capabilities in service file

As freeradius is not run as root we need to request extra capabilities
wiht AmbientCapabilities instead of limiting the set with
CapabilityBoundingSet.

Closes: #985967

- - - - -
b79378a4 by Jochen Sprickerhof at 2021-07-23T13:19:11+02:00
Update changelog for 3.0.21+dfsg-2.1 release

- - - - -


2 changed files:

- debian/changelog
- debian/freeradius.service


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,13 @@
+freeradius (3.0.21+dfsg-2.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix capabilities in service file.
+    As freeradius is not run as root we need to request extra capabilities
+    wiht AmbientCapabilities instead of limiting the set with
+    CapabilityBoundingSet. (Closes: #985967)
+
+ -- Jochen Sprickerhof <jspricke at debian.org>  Fri, 23 Jul 2021 13:19:03 +0200
+
 freeradius (3.0.21+dfsg-2) unstable; urgency=medium
 
   * Cherry-Pick upstream fixes to build with Python3.8 (Closes: #966860)


=====================================
debian/freeradius.service
=====================================
@@ -41,7 +41,7 @@ ExecReload=/bin/kill -HUP $MAINPID
 NoNewPrivileges=true
 
 # Allow binding to secure ports, broadcast addresses, and raw interfaces.
-#CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE
+#AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SETUID CAP_SETGID CAP_CHOWN CAP_DAC_OVERRIDE
 
 # Private /tmp that isn't shared by other processes
 PrivateTmp=true



View it on GitLab: https://salsa.debian.org/debian/freeradius/-/compare/cbb4e254a8a6948039ad7077e4ebd695f3a2f3c3...b79378a4bb154fcac890bfc6dc117fb40fdd045f

-- 
View it on GitLab: https://salsa.debian.org/debian/freeradius/-/compare/cbb4e254a8a6948039ad7077e4ebd695f3a2f3c3...b79378a4bb154fcac890bfc6dc117fb40fdd045f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeradius-maintainers/attachments/20210723/6415ab8f/attachment.htm>