diff options
author | Vladimír Čunát <v@cunat.cz> | 2019-07-12 15:52:24 +0200 |
---|---|---|
committer | Vladimír Čunát <v@cunat.cz> | 2019-07-12 15:53:22 +0200 |
commit | 9354bc967d381c4e27db94b19b9c9a54f400130b (patch) | |
tree | 9e8c61c8f075b34c8172470e805d1cf4736b2fef /nixos | |
parent | d10e680168d8b27b7ef5605926507b9bb1735211 (diff) | |
parent | c5d39d89621e78a22133aea5a9e0ad4c92dfc5a9 (diff) |
Merge knot-resolver: 3.2.1 -> 4.1.0 (security)
19.03: I'm really sorry to pull a "major" update, but the security fixes are rather hard to backport correctly. Please contact me in case you run into problems when upgrading.
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/networking/kresd.nix | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/nixos/modules/services/networking/kresd.nix b/nixos/modules/services/networking/kresd.nix index ca34ff9df4ef3..fc516c01230a3 100644 --- a/nixos/modules/services/networking/kresd.nix +++ b/nixos/modules/services/networking/kresd.nix @@ -80,8 +80,11 @@ in # Syntax depends on being IPv6 or IPv4. (iface: if elem ":" (stringToCharacters iface) then "[${iface}]:53" else "${iface}:53") cfg.interfaces; - socketConfig.ListenDatagram = listenStreams; - socketConfig.FreeBind = true; + socketConfig = { + ListenDatagram = listenStreams; + FreeBind = true; + FileDescriptorName = "dns"; + }; }; systemd.sockets.kresd-tls = mkIf (cfg.listenTLS != []) rec { |