Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Mar 2001 02:13:25 -0600
From:      Christopher Farley <chris@northernbrewer.com>
To:        Eugene Lee <eugene@anime.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: /var/run/named.pid annoyance
Message-ID:  <20010312021324.D78116@northernbrewer.com>
In-Reply-To: <20010311230428.B18069@anime.net>; from eugene@anime.net on Sun, Mar 11, 2001 at 11:04:28PM -0800
References:  <20010311230428.B18069@anime.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Eugene Lee (eugene@anime.net) wrote:

> Every time I do a reload, I get this in /var/log/messages:
> 
> 	Mar 12 00:48:47 localhost named[119]: reloading nameserver
> 	Mar 12 00:48:47 localhost named[119]: couldn't create pid file '/var/run/named.pid'
> 	Mar 12 00:48:47 localhost named[119]: Ready to answer queries.
> 
> The reason for this is that I run it with "-u bind -g bind" options.
> What would be the most secure way to solve this problem?

This is a permissions problem. User bind does not have permissions to
write files to /var/run.

The desired workaround is to change the PID file location by adding
this to the "options" section of your /etc/namedb/named.conf file:

      pid-file "/var/named/named.pid"

You must then (as root):

# mkdir /var/named
# chown bind:bind /var/named


More details on this setup are available at:
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01%3A18.bind.asc
-- 
Christopher Farley
www.northernbrewer.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010312021324.D78116>