Bug#843537: Fails to start dovecot/resolved with NAMESPACE spawning error

[Martin Pitt]

Hello Yuri,

Yuri D'Elia [2016-11-07 16:10 +0100]:
> Nov  7 15:26:03 e systemd[18963]: systemd-resolved.service: Failed at step NAMESPACE spawning /bin/sh: Bad file descriptor

As Michael said, your kernel is likely too old. I suspect one of the
new hardening options in /lib/systemd/system/systemd-resolved.service:

  PrivateTmp=yes
  PrivateDevices=yes
  ProtectControlGroups=yes
  ProtectKernelTunables=yes
  RestrictRealtime=yes
  RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6

You can try commenting some or all of them.

Nevertheless, this is most likely a wontfix. We can't support ancient kernels
forever.

Martin
-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)