3 Commits

Author	SHA1	Message	Date
Christian Heimes	e881e35783	Fix various OpenDNSSEC 2.1 issues ... Require OpenDNSSEC 2.1.6-5 with fix for RHBZ#1825812 (DAC override AVC) Allow ipa-dnskeysyncd to connect to enforcer.sock (ipa_dnskey_t write opendnssec_var_run_t and connectto opendnssec_t). The opendnssec_stream_connect interface is available since 2016. Change the owner of the ipa-ods-exporter socket to ODS_USER:ODS_GROUP. The ipa-ods-exporter service already runs as ODS_USER. Fixes: https://pagure.io/freeipa/issue/8283 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>	2020-04-21 21:37:06 +02:00
Timo Aaltonen	44a3e0fe1d	configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in ... These are platform specific, add values for Debian and default values for Fedora/RHEL. Also, use prettier output when checking the extra python install options. Reviewed-By: Martin Basti <mbasti@redhat.com>	2017-03-22 13:39:18 +01:00
Petr Spacek	312e780041	Build: integrate daemons/dnssec into build system ... https://fedorahosted.org/freeipa/ticket/6418 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com>	2016-11-09 13:08:32 +01:00