From owner-freebsd-net@FreeBSD.ORG Mon Aug 4 02:56:26 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 29F901065679 for ; Mon, 4 Aug 2008 02:56:26 +0000 (UTC) (envelope-from eugen@kuzbass.ru) Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by mx1.freebsd.org (Postfix) with ESMTP id 600248FC14 for ; Mon, 4 Aug 2008 02:56:25 +0000 (UTC) (envelope-from eugen@kuzbass.ru) Received: from www.svzserv.kemerovo.su (eugen@localhost [127.0.0.1]) by www.svzserv.kemerovo.su (8.13.8/8.13.8) with ESMTP id m742uMJU002358 for ; Mon, 4 Aug 2008 10:56:22 +0800 (KRAST) (envelope-from eugen@www.svzserv.kemerovo.su) Received: (from eugen@localhost) by www.svzserv.kemerovo.su (8.13.8/8.13.8/Submit) id m742uMQ9002357 for freebsd-net@freebsd.org; Mon, 4 Aug 2008 10:56:22 +0800 (KRAST) (envelope-from eugen) Date: Mon, 4 Aug 2008 10:56:22 +0800 From: Eugene Grosbein To: freebsd-net@freebsd.org Message-ID: <20080804025622.GA2278@svzserv.kemerovo.su> References: <20080803073803.GA10321@grosbein.pp.ru> <4895EB57.2000801@FreeBSD.org> <20080803183346.GA53252@svzserv.kemerovo.su> <20080803192140.GJ13898@verio.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20080803192140.GJ13898@verio.net> User-Agent: Mutt/1.4.2.3i Subject: Re: permissions on /etc/namedb X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Aug 2008 02:56:26 -0000 On Sun, Aug 03, 2008 at 02:21:41PM -0500, David DeSimone wrote: > > I need /etc/namedb to be owned by root:bind and have permissions > > 01775, so bind may write to it but may not overwrite files that belong > > to root here, and I made it so. > > Can't you just modify /etc/mtree/BIND.chroot.dist so that it sets the > permissions you desire? Yes, that might be way to go. Eugene Grosbein