From owner-freebsd-stable  Thu Feb  1  9:22:14 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from harp.wrdp.com (harp.dublin.wrdp.net [212.147.130.131])
	by hub.freebsd.org (Postfix) with ESMTP id 9FC9C37B6A6
	for <stable@freebsd.org>; Thu,  1 Feb 2001 09:21:56 -0800 (PST)
Received: from JRAFTERY (jraftery.dublin.wrdp.net [172.16.4.52])
	by harp.wrdp.com (Postfix) with SMTP
	id B833410AD0; Thu,  1 Feb 2001 17:21:47 +0000 (GMT)
Message-ID: <010601c08c73$c0a4fe20$340410ac@JRAFTERY>
From: "James Raftery" <jraftery@wrdp.com>
To: "Vivek Khera" <khera@kciLink.com>,
	"FreeBSD Stable" <stable@freebsd.org>
References: <14969.38607.142726.115583@onceler.kciLink.com>
Subject: Re: DNS security
Date: Thu, 1 Feb 2001 17:23:54 -0000
Organization: Worldport Communications Inc
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> 2) bind tries to write temporary files into the CWD.  Unfortunately,
>    /etc/namedb is root:wheel and not writable by the bind process
>    owner.  There doesn't seem to be a parameter to bind to tell it
>    where to write those files, but there is an environment variable,
>    DSTKEYPATH, that can be used.

Use the 'directory' statement in the options clause of named.conf:

options {
    [...]
    directory "/var/tmp";
};

Change /var/tmp to some directory in your chroot tree that the bind user
can write to.


Regards,

james





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message