Comment 16 for bug 1749931

Debdiff is good, thanks Simon!.
I think it is fair to add fsetid for now to work.
If details are found how that can be limited later we can do so still.

With the fixes applied as expected the control socket is usable now when running from [1] in a container.

(my old) lintian complains about a few things, but none of it were touched on this change - so leaving them as is for now.

Sponsoring into bionic [2]

Please help tracking the migration over the next few days ...

[1]: https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/3178/+packages
[2]: https://launchpad.net/ubuntu/+source/unbound/1.6.7-1ubuntu2