From owner-freebsd-questions  Mon Aug 20  2:16:15 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mip.co.za (puck.mip.co.za [209.212.106.44])
	by hub.freebsd.org (Postfix) with ESMTP id 6460137B40D
	for <freebsd-questions@freebsd.org>; Mon, 20 Aug 2001 02:16:05 -0700 (PDT)
	(envelope-from patrick@mip.co.za)
Received: from patrick (patrick.mip.co.za [10.3.13.181])
	by mip.co.za (8.9.3/8.9.3) with SMTP id LAA67538
	for <freebsd-questions@freebsd.org>; Mon, 20 Aug 2001 11:16:06 +0200 (SAST)
	(envelope-from patrick@mip.co.za)
From: "Patrick O'Reilly" <patrick@mip.co.za>
To: "'FreeBSD Question List (E-mail)'" <freebsd-questions@freebsd.org>
Subject: RE: Name Daemon dies on signal 11 ?!?
Date: Mon, 20 Aug 2001 11:17:24 +0200
Message-ID: <008801c12958$f62671a0$b50d030a@patrick>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <20010820100304.A26382@student.uu.se>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Importance: Normal
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Thanks Eric, Len and Edwin...

I'm busy running the pkg_add as suggested by Len.

I see that the vulnerability should be fixed in 4.3-RELEASE (which CDs I
just recently received).  I'll schedule a re-install with the 4.3 CDs ASAP.
(I guess it's time I set my mind to implementing CVSup ?!?)

Thanks once again for your quick and helpful responses!

PS: I see a suggestion in the advisory that 'named' can be run unprivileged,
and chrooted, etc.  Would you consider this to be a good practice for
security reasons, regardless of known vulnerabilities?

(and a little later...)

PPS: OK - the 'pkg_add -r bind' is done.  Now pkg_info says I have version
9.1.3!  I see the new 'named' is in /usr/local/sbin/, and after a reboot
'named -v' still reports v8.2.3.  Any suggestions on the best way to hook it
into /usr/sbin/?  I could copy, move, hard/sym link?  The original
/usr/sbin/named (v8) is still in-situ.  I'm guessing :
% mv /usr/sbin/named /usr/sbin/named.8       # keep v823 for posterity
% ln /usr/local/sbin/named /usr/sbin/named   # link v913 into place

Thanks,
Patrick.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message