Date: Mon, 3 Dec 2007 17:03:43 -0500 From: "Philip M. Gollucci" <pgollucci@riderway.com> To: "Gelsema, P (Patrick) - FreeBSD" <freebsd@superhero.nl> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Re: named / BIND 9.4.1-P1 /etc/named/master ownership Message-ID: <47547D3F.50307@riderway.com> In-Reply-To: <4760.10.202.77.103.1196718933.squirrel@webmail.superhero.nl> References: <4760.10.202.77.103.1196718933.squirrel@webmail.superhero.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
Gelsema, P (Patrick) - FreeBSD wrote:
> In /etc/rc.conf I got the following.
> hulk# cat /etc/rc.conf | grep named
> named_enable="YES"
> named_uid="bind"
> named_chrootdir="/var/named"
grep named /etc/defaults/rc.conf
# named. It may be possible to run named in a sandbox, man security for
named_enable="NO" # Run named, the DNS server (or NO).
named_program="/usr/sbin/named" # path to named, if you want a different
one.
#named_flags="" # Flags for named
named_pidfile="/var/run/named/pid" # Must set this in named.conf as well
named_uid="bind" # User to run named as
named_chrootdir="/var/named" # Chroot directory (or "" not to
auto-chroot it)
named_chroot_autoupdate="YES" # Automatically install/update chrooted
# components of named. See /etc/rc.d/named.
named_symlink_enable="YES" # Symlink the chrooted pid file
As you can see, your named_uid and named_chrootdir are not needed, that
is the default.
The thing causing your issue is named_chroot_autoupdate="YES" (the
default) and it is correct to do so, you should not be changing these
without very good reason.
--
------------------------------------------------------------------------
Philip M. Gollucci (philip@ridecharge.com)
o:703.549.2050x206
Senior System Admin - Riderway, Inc.
http://riderway.com / http://ridecharge.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB B89E 1324 9B4F EC88 A0BF
Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47547D3F.50307>