# kea \>= 1:3.0.3-6 update requires manual intervention

DevFeed: [kea \>= 1:3.0.3-6 update requires manual intervention](<https://devfeed.tech/articles/kea-1-3-0-3-6-update-requires-manual-intervention-46786.md>)

Original publisher: [Read original article](<https://archlinux.org/news/kea-1303-6-update-requires-manual-intervention/>)

Author: Robin Candau

Published: 2026-04-07T16:50:29Z

Content type: release

Language: en

Sources: [Arch Linux: Recent news updates](<https://devfeed.tech/sources/arch-linux-recent-news-updates.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [DHCP](<https://devfeed.tech/topics/dhcp.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [permission](<https://devfeed.tech/topics/permission.md>), [service](<https://devfeed.tech/topics/service.md>)

Tags: [dhcp](<https://devfeed.tech/tags/dhcp.md>), [installation](<https://devfeed.tech/tags/installation.md>), [permission](<https://devfeed.tech/tags/permission.md>), [root](<https://devfeed.tech/tags/root.md>), [security](<https://devfeed.tech/tags/security.md>), [service](<https://devfeed.tech/tags/service.md>), [services](<https://devfeed.tech/tags/services.md>), [update](<https://devfeed.tech/tags/update.md>)

## AI overview

The Kea package update moves its services from root to a dedicated kea user for improved security. Existing installations require ownership and permission updates for runtime files, and users who need to access lease, log, or configuration files must be added to the kea group.

## Source excerpt

The kea package has moved all services to run as a dedicated kea user (instead of root) for improved security. This change requires permission updates to the runtime files created by the kea services. Users upgrading from an existing kea installation should therefore run the following commands after the upgrade: chown kea: /var/lib/kea/* /var/log/kea/* /run/lock/kea/logger_lockfile systemctl try-restart kea-ctrl-agent.service kea-dhcp{4,6,-ddns}.service Accounts that need to interact with kea services files (e.g. lease files under /var/lib/kea, log files under /var/log/kea or configuration files under /etc/kea) should be added to the kea group.