Date: Tue, 28 Oct 2008 04:24:33 GMT From: Dheeraj Reddy <dheeraj@ece.gatech.edu> To: freebsd-gnats-submit@FreeBSD.org Subject: conf/128429: Permissions of bind9 chroot 'master' directory Message-ID: <200810280424.m9S4OXi7027534@www.freebsd.org> Resent-Message-ID: <200810280430.m9S4U2Rk029119@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 128429
>Category: conf
>Synopsis: Permissions of bind9 chroot 'master' directory
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Oct 28 04:30:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Dheeraj Reddy
>Release: 8.0-current
>Organization:
Intel
>Environment:
FreeBSD vagisha.sudheeraj.net 8.0-CURRENT FreeBSD 8.0-CURRENT #0 r184101: Tue Oct 21 08:09:24 PDT 2008 dheeraj@vagisha.sudheeraj.net:/usr/obj/usr/src/sys/VAGISHA-CURRENT i386
>Description:
According to /usr/src/etc/mtree/BIND.chroot.dist the permissions ofr
/var/named/etc/namedb/master inherits the permissions/ownership root:wheel.
However, it should be bind:wheel because, if people are using ddns updates, the journal files for the updates need to be created in master/* by the named process that runs with the credentials of bind:wheel
>How-To-Repeat:
Configure ports/net/isc-dhcp3-server with ddns updates 'interim'
>Fix:
Index: BIND.chroot.dist
===================================================================
--- BIND.chroot.dist (revision 184319)
+++ BIND.chroot.dist (working copy)
@@ -11,7 +11,7 @@
namedb
dynamic uname=bind
..
- master
+ master uname=bind
..
slave uname=bind
..
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200810280424.m9S4OXi7027534>