Commit bca5f8d4 authored by Eric Dorland's avatar Eric Dorland

Disable socket activation and privilege dropping for the moment

parent 8edcc0a5
[Unit]
Description=DNSCrypt client proxy
Documentation=man:dnscrypt-proxy(8)
Requires=dnscrypt-proxy.socket
# Requires=dnscrypt-proxy.socket
After=network.target
Before=nss-lookup.target
[Install]
Also=dnscrypt-proxy.socket
# Also=dnscrypt-proxy.socket
WantedBy=multi-user.target
[Service]
Type=simple
NonBlocking=true
User=_dnscrypt-proxy
# Put this back
# User=_dnscrypt-proxy
ExecStart=/usr/sbin/dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
Restart=always
ProtectSystem=strict
ProtectHome=true
#ProtectSystem=strict
#ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectControlGroups=true
......
[Unit]
Description=dnscrypt-proxy listening socket
Documentation=man:dnscrypt-proxy(8)
Wants=dnscrypt-proxy-resolvconf.service
[Socket]
ListenStream=127.0.2.1:53
ListenDatagram=127.0.2.1:53
NoDelay=true
DeferAcceptSec=1
[Install]
WantedBy=sockets.target
......@@ -16,9 +16,10 @@ override_dh_auto_install:
override_dh_install:
dh_install
install -m755 -d debian/dnscrypt-proxy/lib/systemd/system
install -m644 -p debian/dnscrypt-proxy-resolvconf.service \
debian/dnscrypt-proxy/lib/systemd/system
# Fix once socket activation is fixed.
# install -m755 -d debian/dnscrypt-proxy/lib/systemd/system
# install -m644 -p debian/dnscrypt-proxy-resolvconf.service \
# debian/dnscrypt-proxy/lib/systemd/system
override_dh_installinit:
dh_installinit --restart-after-upgrade
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment