- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user Resolves: RHEL-91447 Resolves: RHEL-92741 Resolves: RHEL-95234
5 lines
134 B
Plaintext
5 lines
134 B
Plaintext
# kea needs existing /run/kea/ to create logger_lockfile and pidfile there
|
|
# See tmpfiles.d(5) for details
|
|
|
|
d /run/kea 0750 kea kea -
|