Bug#866523: Duplicate systemd units

2017-07-18 Thread John Hall
Bernhard, > Unfortunately I'm a total DAC illiterate, can anyone explain the > difference between > > Upstream: > CAP_DAC_OVERRIDE > > Debian: > CAP_DAC_READ_SEARCH CAP_AUDIT_WRITE > > and what they actually mean? What is allowed by the Debian unit that > is not allowed by the Upstream unit, an

Bug#866523: Duplicate systemd units

2017-07-18 Thread John Hall
This bug hit me pretty hard. I unknowingly used the upstream openvpn-server@ unit, and then spent a day or so trying to work out why it did not work - the upstream one has CAP_AUDIT_WRITE missing from its capability list. Perhaps the upstream one could be patched to include this capability?