debian stretch PPA: systemd service doesn't have privileges to bind to well-known ports
If I install the current knot-resolver package (1.5.0-1+020171112102149.11+stretch1.gbp1554e1) from the projects debian repositories to a up to date debian stretch I can't get it running because it can't bind to the configured interface addresses.
The problem is that the daemon is started as user knot-resolver over systemd. This users hasn't the permission to bind to the necessary interface addresses and port configured in the config. Also the dropping of permissions over the config doesn't work because there are no permission to drop. This looks like a wrong default value for the user in the systemd config file. If this is on purpose there should be a hint in the documentation an default config file.