Dear Maintainer,

The script contains a line like so:

	setcap "cap_net_bind_service" $DAEMON

When launched, it complains the syntax for setcap is wrong.

Replacing that like so:

	setcap "cap_net_bind_service=pe" $DAEMON

runs the binary.  (Tweaking permissions of /run/kea)

Best
Ale


PS:
606-north:init.d# ls -l /etc/kea/kea-dhcp-ddns.conf
-rw-r--r-- 1 root root 3025 Jun  2 19:00 /etc/kea/kea-dhcp-ddns.conf

Control: severity -1 wishlist
Hi, the problematic line comes from a patch submitted in #1055438 (Cc:
Stefan Klein for awareness). Patches for for alternative init systems
are welcome, ideally as Salsa MRs [1].

Thanks,

Paride

[1] https://salsa.debian.org/debian/isc-kea

Hi,

thank you, Alessandro Vesely, for spotting the missing setcap flags.
I must have forgetten adding these after copying from the systemd
service file.

I made https://salsa.debian.org/debian/isc-kea/-/merge_requests/64 to
fix that. Would you be so kind to review the changes, Paride Legovini?
(sorry to bother you again with that sysv-init topic)

Regards,
Stefan

Hi,


I don't usually use capabilities, and guessed that change after browsing the docs.  Now that I look at my init files, I see this:

520-north:~# grep "setcap " /etc/init.d/*
/etc/init.d/kea-dhcp4-server:	setcap "cap_net_bind_service,cap_net_raw=+ep" $DAEMON
/etc/init.d/kea-dhcp6-server:	setcap "cap_net_bind_service" $DAEMON
/etc/init.d/kea-dhcp-ddns-server:	setcap "cap_net_bind_service=pe" $DAEMON


I registered at Debian Salsa Gitlab in order to review the patch, but it seems to take time.


Never mind.

Thank you for taking care
Ale