From owner-freebsd-questions@FreeBSD.ORG Tue Nov 8 21:27:47 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AF7DE16A41F for ; Tue, 8 Nov 2005 21:27:47 +0000 (GMT) (envelope-from hemi@puresimplicity.net) Received: from just.puresimplicity.net (just.puresimplicity.net [140.177.207.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 539C643D48 for ; Tue, 8 Nov 2005 21:27:40 +0000 (GMT) (envelope-from hemi@puresimplicity.net) Received: from just.puresimplicity.net (localhost.puresimplicity.net [127.0.0.1]) by just.puresimplicity.net (8.13.4/8.13.4) with ESMTP id jA8LRcnI002185 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 8 Nov 2005 15:27:38 -0600 (CST) (envelope-from hemi@just.puresimplicity.net) Received: (from hemi@localhost) by just.puresimplicity.net (8.13.4/8.13.4/Submit) id jA8LRcxa002184; Tue, 8 Nov 2005 15:27:38 -0600 (CST) (envelope-from hemi) Date: Tue, 8 Nov 2005 15:27:38 -0600 From: Josh Tolbert To: Lowell Gilbert Message-ID: <20051108212738.GB1623@just.puresimplicity.net> References: <20051108081941.GA27333@just.puresimplicity.net> <44hdanhy1w.fsf@be-well.ilk.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <44hdanhy1w.fsf@be-well.ilk.org> User-Agent: Mutt/1.4.2.1i Cc: freebsd-questions@freebsd.org Subject: Re: Unusual permissions on /var/named/etc/namedb/master? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2005 21:27:47 -0000 On Tue, Nov 08, 2005 at 12:03:23PM -0500, Lowell Gilbert wrote: > Josh Tolbert writes: > > > Hello, > > > > I'm running DHCP + dynamic DNS here on my home LAN and I've noticed a problem > > that needs a manual fix every time the DNS machine gets rebooted. It doesn't > > happen very often, but it does happen. :) > > > > My firewall/gateway machine runs FreeBSD-5.4-RELEASE of some patchlevel. It > > uses ISC DHCPD from ports to update my DNS server, another FreeBSD machine > > (now running 6.0-RELEASE) with new entries when machines register with the > > DHCP server. The problem arises because by default named runs -u bind, however > > /var/named/etc/namedb/master is owned by root. I believe this is caused by > > /etc/mtree/BIND.chroot.dist, since I'm running bind chrooted (the default > > setup). When the DNS machine reboots, I have to manually chown > > /var/named/etc/namedb/master (or /etc/namedb/master) to bind before updates > > will continue, otherwise I see errors such as > > > > named[297]: dumping master file: master/tmp-QQ2UU6pWaZ: open: permission denied > > > > Is there any good workaround for this issue? I'd like to keep bind running as > > the bind user as well as keep bind chrooted if possible. I know I could edit > > the mtree file on my machine, but that seems somewhat kludgy to me. > > > > Thanks for any help/advice you can give me, > > Normally mtree is only automatically run by installworld. > Is that what causes the permissions to be reverted? > If so, then change the mtree file (and keep the modifications over > time when you run mergemaster). > If not, then figure out what *is* changing the permissions. Hi Lowell, >From what I'm seeing in the /etc/rc.d/named script, mtree gets ran with the BIND.chroot.dist mtree file every time bind starts. I guess I'll have to maintain my own changes to that file for the time being. Thanks, Josh -- Josh Tolbert hemi@puresimplicity.net || http://www.puresimplicity.net/~hemi/ If your sysadmin's not being fascist, you're paying him too much. --Sam Greenfield