Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 1 Feb 2001 17:23:54 -0000
From:      "James Raftery" <jraftery@wrdp.com>
To:        "Vivek Khera" <khera@kciLink.com>, "FreeBSD Stable" <stable@freebsd.org>
Subject:   Re: DNS security
Message-ID:  <010601c08c73$c0a4fe20$340410ac@JRAFTERY>
References:  <14969.38607.142726.115583@onceler.kciLink.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> 2) bind tries to write temporary files into the CWD.  Unfortunately,
>    /etc/namedb is root:wheel and not writable by the bind process
>    owner.  There doesn't seem to be a parameter to bind to tell it
>    where to write those files, but there is an environment variable,
>    DSTKEYPATH, that can be used.

Use the 'directory' statement in the options clause of named.conf:

options {
    [...]
    directory "/var/tmp";
};

Change /var/tmp to some directory in your chroot tree that the bind user
can write to.


Regards,

james





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?010601c08c73$c0a4fe20$340410ac>