#!/bin/sh
exec 2>&1
install -d -m0750 -o _gdnsd -g _gdnsd /run/gdnsd
exec setpriv --reuid _gdnsd --regid _gdnsd --groups _gdnsd \
     --securebits +noroot,+noroot_locked,+no_setuid_fixup,+no_setuid_fixup_locked \
     --bounding-set -all,+net_bind_service \
     --ambient-caps -all,+net_bind_service \
     --inh-caps     -all,+net_bind_service \
     --no-new-privs \
     gdnsd -c /etc/gdnsd -R start
