X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d64041e863fe325be5176e6b83098d2de3bc0051..52cd38fa82f0eb1febb5cca9ddbf62253e15e620:/cookbooks/dns/recipes/default.rb

diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb
index 11ae88e8a..d25c45731 100644
--- a/cookbooks/dns/recipes/default.rb
+++ b/cookbooks/dns/recipes/default.rb
@@ -41,7 +41,7 @@ package %w[
 
 cache_dir = Chef::Config[:file_cache_path]
 
-dnscontrol_version = "3.20.0"
+dnscontrol_version = "3.21.0"
 
 dnscontrol_arch = if arm?
                     "arm64"
@@ -178,6 +178,7 @@ systemd_service "dns-check" do
   protect_system "strict"
   protect_home true
   read_write_paths "/var/lib/dns"
+  no_new_privileges true
 end
 
 systemd_timer "dns-check" do