From owner-cvs-all  Thu Aug 23 13:14:34 2001
Delivered-To: cvs-all@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP
	id A071537B403; Thu, 23 Aug 2001 13:14:26 -0700 (PDT)
	(envelope-from gshapiro@gshapiro.net)
Received: from horsey.gshapiro.net (gshapiro@localhost [127.0.0.1])
	by horsey.gshapiro.net (8.12.0.Beta16/8.12.0.Beta16) with ESMTP id f7NKENjq033236
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Thu, 23 Aug 2001 13:14:23 -0700 (PDT)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.0.Beta16/8.12.0.Beta16) id f7NKEM1n033230;
	Thu, 23 Aug 2001 13:14:22 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15237.25629.984833.498036@horsey.gshapiro.net>
Date: Thu, 23 Aug 2001 13:14:21 -0700
From: Gregory Neil Shapiro <gshapiro@FreeBSD.org>
To: Matt Dillon <dillon@earth.backplane.com>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/etc/defaults rc.conf src/etc/mtree BSD.var.dist src/etc/namedb named.conf
In-Reply-To: <200108231645.f7NGjYe86993@earth.backplane.com>
References: <ache@nagual.pp.ru>
	<20010823174457.A27360@nagual.pp.ru>
	<200108231413.f7NEDvg71094@hak.lan.Awfulhak.org>
	<20010823185515.A28168@nagual.pp.ru>
	<200108231645.f7NGjYe86993@earth.backplane.com>
X-Mailer: VM 6.92 under 21.5  (beta1) "anise" XEmacs Lucid
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

dillon> I like the idea of, finally, invoking named in a sandbox.  I don't
dillon> understand why the pidfile location has to change, though.  named
dillon> creates its pidfile as root before it setuid's itself.

That is true.  However, then the pid file can not be updated on an `ndc
reload` or a HUP:

Aug 20 19:23:22 horsey named[326]: reconfiguring nameserver
Aug 20 19:23:22 horsey named[326]: couldn't create pid file '/var/run/named.pid'

Then you end up with a stale, unreliable pid file.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message