unbound package service misconfiguration

[Deny]

So, by default the unbound service unit (/lib/systemd/system/unbound.service) comes with the line "ExecStart=/usr/sbin/unbound -d -p $DAEMON_OPTS".

The "-p" part prevents the service from creating a pid file, no matter what I enter in unbound's configuration file (pidfile: option).

I had to remove the -p parameter to get a pid for the service in default /var/run location.

Version 1.13.1

Configure line: --build=aarch64-linux-gnu --prefix=/usr --includedir=${prefix}/include --mandir=${prefix}/share/man --infodir=${prefix}/share/info --sysconfdir=/etc --localstatedir=/var --disable-option-checking --disable-silent-rules --libdir=${prefix}/lib/aarch64-linux-gnu --libexecdir=${prefix}/lib/aarch64-linux-gnu --disable-maintainer-mode --disable-dependency-tracking --disable-rpath --with-pidfile=/run/unbound.pid --with-rootkey-file=/var/lib/unbound/root.key --with-libevent --with-pythonmodule --enable-subnet --enable-dnstap --enable-systemd --with-chroot-dir= --with-dnstap-socket-path=/run/dnstap.sock --libdir=/usr/lib --disable-flto
Linked libs: libevent 2.1.12-stable (it uses epoll), OpenSSL 1.1.1k 25 Mar 2021
Linked modules: dns64 python subnetcache respip validator iterator