Up to 9.18.11; fixes CVE-2022-3094, CVE-2022-3736, CVE-2022-3924

[packages/bind.git] / named.service

diff --git a/named.service b/named.service
index 0138aeac37073b66c993e32a4a7a8eeec8097211..d58df8033fe82475ae241cee9bbf5a88228a9658 100644 (file)
--- a/named.service
+++ b/named.service
@@ -9,13 +9,13 @@ Type=forking
 PrivateTmp=true
 Environment=CHROOT_TO_DIR=/var/lib/named
 EnvironmentFile=-/etc/sysconfig/named
-ExecStartPre=touch $CHROOT_TO_DIR/named.log
-ExecStartPre=chown named:named $CHROOT_TO_DIR/named.log
-ExecStartPre=/usr/sbin/named-checkconf -z /etc/named.conf
-ExecStart=/usr/sbin/named -u named -t $CHROOT_TO_DIR -c /etc/named.conf $NAMED_OPT
+ExecStartPre=/bin/touch ${CHROOT_TO_DIR}/named.log
+ExecStartPre=/bin/chown named:named ${CHROOT_TO_DIR}/named.log
+ExecStartPre=/usr/bin/named-checkconf -t ${CHROOT_TO_DIR} -z /etc/named.conf
+ExecStart=/usr/sbin/named -u named -t ${CHROOT_TO_DIR} -c /etc/named.conf $NAMED_OPT
 ExecStop=/bin/sh -c '[ -f /etc/rndc.conf ] && /usr/sbin/rndc stop || /bin/kill -TERM $MAINPID'
 ExecReload=/bin/sh -c '[ -f /etc/rndc.conf ] && /usr/sbin/rndc reload || /bin/kill -HUP $MAINPID'
-PIDFile=$CHROOT_TO_DIR/named.pid
+PIDFile=/var/lib/named/named.pid
 
 [Install]
 WantedBy=multi-user.target