about summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorVladimír Čunát <v@cunat.cz>2019-07-12 15:52:24 +0200
committerVladimír Čunát <v@cunat.cz>2019-07-12 15:53:22 +0200
commit9354bc967d381c4e27db94b19b9c9a54f400130b (patch)
tree9e8c61c8f075b34c8172470e805d1cf4736b2fef /nixos
parentd10e680168d8b27b7ef5605926507b9bb1735211 (diff)
parentc5d39d89621e78a22133aea5a9e0ad4c92dfc5a9 (diff)
Merge knot-resolver: 3.2.1 -> 4.1.0 (security)
19.03: I'm really sorry to pull a "major" update, but the security
fixes are rather hard to backport correctly.  Please contact me in case
you run into problems when upgrading.
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/kresd.nix7
1 files changed, 5 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/kresd.nix b/nixos/modules/services/networking/kresd.nix
index ca34ff9df4ef3..fc516c01230a3 100644
--- a/nixos/modules/services/networking/kresd.nix
+++ b/nixos/modules/services/networking/kresd.nix
@@ -80,8 +80,11 @@ in
         # Syntax depends on being IPv6 or IPv4.
         (iface: if elem ":" (stringToCharacters iface) then "[${iface}]:53" else "${iface}:53")
         cfg.interfaces;
-      socketConfig.ListenDatagram = listenStreams;
-      socketConfig.FreeBind = true;
+      socketConfig = {
+        ListenDatagram = listenStreams;
+        FreeBind = true;
+        FileDescriptorName = "dns";
+      };
     };
 
     systemd.sockets.kresd-tls = mkIf (cfg.listenTLS != []) rec {