From 06e6f74d5fbb846589795dde5330c18f1b28bc4e Mon Sep 17 00:00:00 2001
From: Petr Menšík <pemensik@redhat.com>
Date: Dec 06 2023 20:59:14 +0000
Subject: Consider unbound-anchor maintained root.key config file


Required to keep it maintained by the unbound-anchor.service. Do not
reset it to vendor file again on package upgrade. If it were once
modified, keep it modified.

Resolves: rhbz#2142368

---

diff --git a/unbound.spec b/unbound.spec
index de33dbc..bcc5e24 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -479,7 +479,7 @@ popd
 %{_sysusersdir}/%{name}.conf
 %{_libdir}/libunbound.so.8*
 %dir %attr(0755,unbound,unbound) %{_sharedstatedir}/%{name}
-%verify(not size mtime filedigest link mode user group) %{_sharedstatedir}/%{name}/root.key
+%config(noreplace) %verify(not link user group) %{_sharedstatedir}/%{name}/root.key
 # just left for backwards compat with user changed unbound.conf files - format is different!
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/dnssec-root.key