Merge pull request #565 from Maryse47/patch-1

wcawijngaards · web-flow · commit 7df1a347a58d · 2021-11-05T13:21:00.000+01:00
unbound.service.in: Disable ProtectKernelTunables again
diff --git a/contrib/unbound.service.in b/contrib/unbound.service.in
@@ -64,7 +64,8 @@ ProtectClock=true
 ProtectControlGroups=true
 ProtectKernelLogs=true
 ProtectKernelModules=true
-ProtectKernelTunables=true
+# This breaks using socket options like 'so-rcvbuf'. Explicitly disable for visibility.
+ProtectKernelTunables=false
 ProtectProc=invisible
 ProtectSystem=strict
 RuntimeDirectory=unbound
