freeipa/daemons/dnssec/ipa-ods-exporter.socket.in

[Socket]
ListenStream=@runstatedir@/opendnssec/engine.sock
SocketUser=@ODS_USER@
SocketGroup=@ODS_GROUP@

[Install]
WantedBy=sockets.target
Build: integrate daemons/dnssec into build system https://fedorahosted.org/freeipa/ticket/6418 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2016-11-02 14:48:08 -05:00			`[Socket]`
Use /run and /run/lock instead of /var Also add runstatedir autoconf var. IPA requires autoconf 2.59. The variable will be available with autoconf 2.70. Fixes: https://pagure.io/freeipa/issue/8272 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> 2020-04-15 05:13:00 -05:00			`ListenStream=@runstatedir@/opendnssec/engine.sock`
Fix various OpenDNSSEC 2.1 issues Require OpenDNSSEC 2.1.6-5 with fix for RHBZ#1825812 (DAC override AVC) Allow ipa-dnskeysyncd to connect to enforcer.sock (ipa_dnskey_t write opendnssec_var_run_t and connectto opendnssec_t). The opendnssec_stream_connect interface is available since 2016. Change the owner of the ipa-ods-exporter socket to ODS_USER:ODS_GROUP. The ipa-ods-exporter service already runs as ODS_USER. Fixes: https://pagure.io/freeipa/issue/8283 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> 2020-04-21 02:39:29 -05:00			`SocketUser=@ODS_USER@`
			`SocketGroup=@ODS_GROUP@`
Build: integrate daemons/dnssec into build system https://fedorahosted.org/freeipa/ticket/6418 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2016-11-02 14:48:08 -05:00
			`[Install]`
			`WantedBy=sockets.target`