freeipa/daemons/dnssec/ipa-ods-exporter.service.in

[Unit]
Description=IPA OpenDNSSEC Signer replacement
Wants=ipa-ods-exporter.socket
After=ipa-ods-exporter.socket

[Service]
EnvironmentFile=@sysconfenvdir@/ipa-ods-exporter
ExecStart=@libexecdir@/ipa/ipa-ods-exporter
User=@ODS_USER@
Group=@ODS_GROUP@
PrivateTmp=yes
Restart=on-failure
RestartSec=60s

[Install]
WantedBy=multi-user.target
DNSSEC: add ipa dnssec daemons Tickets: https://fedorahosted.org/freeipa/ticket/3801 https://fedorahosted.org/freeipa/ticket/4417 Design: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com> 2014-10-19 10:04:40 -05:00			`[Unit]`
			`Description=IPA OpenDNSSEC Signer replacement`
			`Wants=ipa-ods-exporter.socket`
			`After=ipa-ods-exporter.socket`

			`[Service]`
Build: integrate daemons/dnssec into build system https://fedorahosted.org/freeipa/ticket/6418 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2016-11-02 14:48:08 -05:00			`EnvironmentFile=@sysconfenvdir@/ipa-ods-exporter`
			`ExecStart=@libexecdir@/ipa/ipa-ods-exporter`
configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in These are platform specific, add values for Debian and default values for Fedora/RHEL. Also, use prettier output when checking the extra python install options. Reviewed-By: Martin Basti <mbasti@redhat.com> 2017-03-15 09:41:50 -05:00			`User=@ODS_USER@`
Fix various OpenDNSSEC 2.1 issues Require OpenDNSSEC 2.1.6-5 with fix for RHBZ#1825812 (DAC override AVC) Allow ipa-dnskeysyncd to connect to enforcer.sock (ipa_dnskey_t write opendnssec_var_run_t and connectto opendnssec_t). The opendnssec_stream_connect interface is available since 2016. Change the owner of the ipa-ods-exporter socket to ODS_USER:ODS_GROUP. The ipa-ods-exporter service already runs as ODS_USER. Fixes: https://pagure.io/freeipa/issue/8283 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> 2020-04-21 02:39:29 -05:00			`Group=@ODS_GROUP@`
DNSSEC: add ipa dnssec daemons Tickets: https://fedorahosted.org/freeipa/ticket/3801 https://fedorahosted.org/freeipa/ticket/4417 Design: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com> 2014-10-19 10:04:40 -05:00			`PrivateTmp=yes`
			`Restart=on-failure`
			`RestartSec=60s`

			`[Install]`
			`WantedBy=multi-user.target`