From owner-freebsd-security  Fri Nov 12 12: 2:46 1999
Delivered-To: freebsd-security@freebsd.org
Received: from broccoli.graphics.cornell.edu (broccoli.graphics.cornell.edu [128.84.247.53])
	by hub.freebsd.org (Postfix) with ESMTP id 61F1414CF0
	for <security@FreeBSD.ORG>; Fri, 12 Nov 1999 12:02:43 -0800 (PST)
	(envelope-from mkc@Graphics.Cornell.EDU)
Received: from graphics.cornell.edu by broccoli.graphics.cornell.edu with ESMTP
	(1.37.109.16/16.2) id AA009816951; Fri, 12 Nov 1999 15:02:31 -0500
Message-Id: <199911122002.AA009816951@broccoli.graphics.cornell.edu>
X-Mailer: exmh version 2.0zeta 7/24/97
To: Barry Irwin <bvi@rucus.ru.ac.za>
Cc: security@FreeBSD.ORG
Subject: Re: Why not sandbox BIND? 
In-Reply-To: Your message of "Fri, 12 Nov 1999 21:29:12 +0200."
             <19991112212912.Z57266@rucus.ru.ac.za> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Fri, 12 Nov 1999 15:02:30 -0500
From: Mitch Collinsworth <mkc@Graphics.Cornell.EDU>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>3.2 System CVSup'd doesnt have it by default
>su-2.03# cat /etc/passwd | grep named
>su-2.03# uname -a
>FreeBSD shagrat.moria.org 3.3-STABLE FreeBSD 3.3-STABLE #0: Thu Oct 21
>15:40:30 SAST 1999
>bvi@shagrat.moria.org:/usr/src/sys/compile/bvi.SHAGRAT
>i386
>
>Same on my other straight 3.2-STABLE system

You must have started reading this thread in the middle.  It's been
stated at least 2 or 3 times now:

# grep bind /etc/passwd
bind:*:53:53:Bind Sandbox:/:/sbin/nologin

(This is 3.2-R.)

-Mitch



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message