On Tue 2018-05-29 15:08:42 -0400, Daniel Kahn Gillmor wrote: > for systems using systemd, the [Service] section of knot.service should > probably contain: > > User=knot > AmbientCapabilities=CAP_NET_BIND_SERVICE
note that upstream now has its own very nice systemd .service file. we should adopt that in debian! --dkg