From owner-freebsd-net@FreeBSD.ORG  Sun Aug  3 08:06:57 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4CD661065674
	for <net@freebsd.org>; Sun,  3 Aug 2008 08:06:57 +0000 (UTC)
	(envelope-from eugen@grosbein.pp.ru)
Received: from grosbein.pp.ru (grosbein.pp.ru [89.189.172.146])
	by mx1.freebsd.org (Postfix) with ESMTP id 9BFAE8FC1A
	for <net@freebsd.org>; Sun,  3 Aug 2008 08:06:56 +0000 (UTC)
	(envelope-from eugen@grosbein.pp.ru)
Received: from grosbein.pp.ru (localhost [127.0.0.1])
	by grosbein.pp.ru (8.14.2/8.14.2) with ESMTP id m737c47N010353
	for <net@freebsd.org>; Sun, 3 Aug 2008 15:38:04 +0800 (KRAST)
	(envelope-from eugen@grosbein.pp.ru)
Received: (from eugen@localhost)
	by grosbein.pp.ru (8.14.2/8.14.2/Submit) id m737c3O3010352
	for net@freebsd.org; Sun, 3 Aug 2008 15:38:03 +0800 (KRAST)
	(envelope-from eugen)
Date: Sun, 3 Aug 2008 15:38:03 +0800
From: Eugene Grosbein <eugen@kuzbass.ru>
To: net@freebsd.org
Message-ID: <20080803073803.GA10321@grosbein.pp.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.3i
Cc: 
Subject: permissions on /etc/namedb
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Aug 2008 08:06:57 -0000

Hi!

I need /etc/namedb to be owned by root:bind and have permissions 01775,
so bind may write to it but may not overwrite files that belong to root
here, and I made it so. Suprise!

# /etc/rc.d/named restart                                                       
Stopping named.                                                                 
Waiting for PIDS: 1892.                                                         
etc/namedb changed                                                              
        gid expected 0 found 53 modified                                        
        permissions expected 0755 found 01775 modified                          
Starting named.

I dislike it very much when a system thinks it knows better what user needs.
Also, I do not want to move a place where bind writes its files to another
location just because system does not want it to write here.
Why was this done such way, do I miss something?

Eugene Grosbein