From owner-cvs-all  Thu Aug 23  8: 5: 5 2001
Delivered-To: cvs-all@freebsd.org
Received: from white.imgsrc.co.jp (ns.imgsrc.co.jp [210.226.20.2])
	by hub.freebsd.org (Postfix) with ESMTP
	id CA57C37B405; Thu, 23 Aug 2001 08:04:58 -0700 (PDT)
	(envelope-from kuriyama@imgsrc.co.jp)
Received: from black.imgsrc.co.jp (black.imgsrc.co.jp [2001:218:422:2:290:27ff:fe98:c0b7])
	by white.imgsrc.co.jp (Postfix) with ESMTP
	id A599724D25; Fri, 24 Aug 2001 00:04:57 +0900 (JST)
Received: from waterblue.imgsrc.co.jp (waterblue.imgsrc.co.jp [210.226.20.160])
	by black.imgsrc.co.jp (Postfix) with ESMTP
	id 5F1F3D1401; Fri, 24 Aug 2001 00:04:55 +0900 (JST)
Date: Fri, 24 Aug 2001 00:04:51 +0900
Message-ID: <7my9oax1f0.wl@waterblue.imgsrc.co.jp>
From: Jun Kuriyama <kuriyama@imgsrc.co.jp>
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/etc/defaults rc.conf src/etc/mtree BSD.var.dist src/etc/namedb named.conf
In-Reply-To: <20010823185515.A28168@nagual.pp.ru>
References: <ache@nagual.pp.ru>
	<20010823174457.A27360@nagual.pp.ru>
	<200108231413.f7NEDvg71094@hak.lan.Awfulhak.org>
	<20010823185515.A28168@nagual.pp.ru>
User-Agent: Wanderlust/2.6.0 (Twist And Shout) SEMI/1.14.3 (Ushinoya)
 FLIM/1.14.3 (=?ISO-8859-1?Q?Unebigory=F2mae?=) APEL/10.3 MULE XEmacs/21.1
 (patch 14) (Cuyahoga Valley) (i386--freebsd)
MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya")
Content-Type: text/plain; charset=US-ASCII
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

At Thu, 23 Aug 2001 18:55:15 +0400,
Andrey A. Chernov <ache@nagual.pp.ru> wrote:
> > I think this change should be reverted.
> 
> I too.

OK.  Other comments?  I'll revert changes if noone supports this.

> If named allows root compromise, better fix named.

Of course.  But I like safety net like this.  IMHO users who want to
use root privilege for named should override it by named_flags="" on
their /etc/rc.conf.


-- 
Jun Kuriyama <kuriyama@imgsrc.co.jp> // IMG SRC, Inc.
             <kuriyama@FreeBSD.org> // FreeBSD Project

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message