1bdd2ce762
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user Resolves: RHEL-91447 Resolves: RHEL-92741 Resolves: RHEL-95234
31 lines
837 B
Desktop File
31 lines
837 B
Desktop File
[Unit]
|
|
Description=Kea Control Agent
|
|
Documentation=man:kea-ctrl-agent(8)
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
After=time-sync.target
|
|
|
|
[Service]
|
|
User=kea
|
|
Environment="KEA_PIDFILE_DIR=/run/kea"
|
|
Environment="KEA_LOCKFILE_DIR=/run/kea"
|
|
#Environment="KEA_LOGGER_DESTINATION=/var/log/kea/early-startup.log"
|
|
Environment="KEA_DHCP_DATA_DIR=/var/lib/kea"
|
|
Environment="KEA_LOG_FILE_DIR=/var/log/kea"
|
|
Environment="KEA_CONTROL_SOCKET_DIR=/run/kea"
|
|
ConfigurationDirectory=kea
|
|
ConfigurationDirectoryMode=0750
|
|
RuntimeDirectory=kea
|
|
RuntimeDirectoryPreserve=yes
|
|
RuntimeDirectoryMode=0750
|
|
LogsDirectory=kea
|
|
LogsDirectoryMode=0750
|
|
StateDirectory=kea
|
|
StateDirectoryMode=0750
|
|
ExecStart=/usr/sbin/kea-ctrl-agent -c /etc/kea/kea-ctrl-agent.conf
|
|
ExecReload=/usr/bin/kill -HUP $MAINPID
|
|
Restart=on-failure
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|