2018-10-06 01:29:04 +03:00
|
|
|
dhcp v4.4.1
|
2018-10-08 15:22:29 +03:00
|
|
|
08.10.2018
|
2018-10-06 01:29:04 +03:00
|
|
|
by mikhailnov
|
|
|
|
|
2018-10-08 15:33:06 +03:00
|
|
|
* dhclient and dhclient moved from /sbin to /usr/sin
|
2018-10-08 15:22:29 +03:00
|
|
|
* Dropped old patches
|
|
|
|
* Now upstream uses built-in bind libraries, we also use them for now (they are linked statically)
|
|
|
|
* Now it's built with KerberOS support
|
|
|
|
|
2018-10-06 01:29:04 +03:00
|
|
|
* Removed 'After=syslog.target' from systemd service dhcpd.service
|
|
|
|
https://www.freedesktop.org/wiki/Software/systemd/syslog/ says:
|
|
|
|
"we do no longer recommend people to order their units after syslog.target"
|
|
|
|
* Merged old ROSA's dhcpd(6).service and Arch's dhcpd{4|6}.service
|
2018-10-08 15:22:29 +03:00
|
|
|
* dhclient@.service from Arch Linux, modified a bit to improve secutrity (e.g. usage: systemctl enable dhclient@enp1s0)
|
|
|
|
* Improved security of dhcpd.service and dhcpd6.service by setting and dropping some capabilities(7)
|
2018-10-06 01:29:04 +03:00
|
|
|
|
|
|
|
* dhcpd user was added on package installation (dhcp-server), but dhcpd was actually ran from root, not dhcpd
|
|
|
|
* use sysusers.d(5) (config isc-dhcpd.conf) instaed of manually created dhcpd user
|
|
|
|
* migration: delete dhcpd user on package uninstallation
|
|
|
|
|
|
|
|
* /etc/sysconfig/dhcp6 called in dhcpd6.service did not exist (dhcpd6.service was broken);
|
2018-10-08 15:22:29 +03:00
|
|
|
let's use /etc/sysconfig/dhcpd for both IPv4 and IPv6
|
2018-10-06 01:29:04 +03:00
|
|
|
|
|
|
|
* /var/lib/dhcpd and /var/lib/dhclient are now defined as variables in the RPM spec
|
2018-10-08 15:22:29 +03:00
|
|
|
Note: they are hardcoded in systemd units
|
2018-10-06 01:29:04 +03:00
|
|
|
|
2018-10-08 15:22:29 +03:00
|
|
|
* TODO(?): Fedora's patch dhcp-paths.patch
|
|
|
|
* TODO: should we ship a separate config of systemd tmpfiles for '/run/dhcpd'?
|
|
|
|
Probable no, it's created automatically (https://www.freedesktop.org/software/systemd/man/systemd.exec.html#Sandboxing)
|
|
|
|
$ stat /run/dhcpd | grep Доступ
|
|
|
|
Доступ: (0755/drwxr-xr-x) Uid: ( 997/isc-dhcpd) Gid: ( 997/isc-dhcpd)
|
|
|
|
Доступ: 2018-10-08 15:15:23.618806764 +0300
|