Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Aug 2001 11:17:24 +0200
From:      "Patrick O'Reilly" <patrick@mip.co.za>
To:        "'FreeBSD Question List (E-mail)'" <freebsd-questions@freebsd.org>
Subject:   RE: Name Daemon dies on signal 11 ?!?
Message-ID:  <008801c12958$f62671a0$b50d030a@patrick>
In-Reply-To: <20010820100304.A26382@student.uu.se>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanks Eric, Len and Edwin...

I'm busy running the pkg_add as suggested by Len.

I see that the vulnerability should be fixed in 4.3-RELEASE (which CDs I
just recently received).  I'll schedule a re-install with the 4.3 CDs ASAP.
(I guess it's time I set my mind to implementing CVSup ?!?)

Thanks once again for your quick and helpful responses!

PS: I see a suggestion in the advisory that 'named' can be run unprivileged,
and chrooted, etc.  Would you consider this to be a good practice for
security reasons, regardless of known vulnerabilities?

(and a little later...)

PPS: OK - the 'pkg_add -r bind' is done.  Now pkg_info says I have version
9.1.3!  I see the new 'named' is in /usr/local/sbin/, and after a reboot
'named -v' still reports v8.2.3.  Any suggestions on the best way to hook it
into /usr/sbin/?  I could copy, move, hard/sym link?  The original
/usr/sbin/named (v8) is still in-situ.  I'm guessing :
% mv /usr/sbin/named /usr/sbin/named.8       # keep v823 for posterity
% ln /usr/local/sbin/named /usr/sbin/named   # link v913 into place

Thanks,
Patrick.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?008801c12958$f62671a0$b50d030a>