Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-22 Thread bauen1
Hi, On 7/21/20 10:09 PM, Ondřej Surý wrote: >> I'm sorry for sending you a poor and untested patch, if you're not generally >> opposed to this sort of change I will create a proper patch and test it >> before sending it. > > No, I am not generally opposed to the change, I am just generally oppo

Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-21 Thread bauen1
Hi, > so, I’ve seen this before with a different package (bind9) and I’ve seen > this to gloriously fail because the systemd file was overzealous and > obviously even you didn’t test it before you sent it to me. I'm sorry, I hit send prematurely, and it was meant as a sort of RFC. I've been using

Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-21 Thread bauen1
I'm sorry, I was under the illusion that environment variables could be used for User= and Group=, so these lines should be: User=bird Group=bird -- bauen1 https://dn42.bauen1.xyz/

Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-21 Thread bauen1
Package: bird2 Version: 2.0.7-4 Severity: wishlist Tags: patch X-Debbugs-Cc: j24...@gmail.com Dear Maintainer, It would be nice if systemds service file could use the appropriate options instead of relying on an additional shell script (at least when systemd is used). This also allows to enable

Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-21 Thread Ondřej Surý
> I'm sorry for sending you a poor and untested patch, if you're not generally opposed to this sort of change I will create a proper patch and test it before sending it. No, I am not generally opposed to the change, I am just generally opposed to "throw in everything and let's see what breaks" in

Bug#965973: bird2: Make use of systemd service options to remove unecessary permissions

2020-07-21 Thread Ondřej Surý
Hi, so, I’ve seen this before with a different package (bind9) and I’ve seen this to gloriously fail because the systemd file was overzealous and obviously even you didn’t test it before you sent it to me. Unless the changed systemd file is extensively tested with ALL routing protocols, there’s n