Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 1 Feb 2001 14:28:42 -0800 (PST)
From:      Matt Dillon <dillon@earth.backplane.com>
To:        Chris Byrnes <chris@JEAH.net>
Cc:        Vivek Khera <khera@kciLink.com>, FreeBSD Stable <stable@FreeBSD.ORG>
Subject:   Re: DNS security
Message-ID:  <200102012228.f11MSg735305@earth.backplane.com>
References:   <Pine.BSF.4.21.0102011129290.62920-100000@awww.jeah.net>

next in thread | previous in thread | raw e-mail | index | archive | help

:cd /etc
:chown -R bind:bind namedb
:chmod 700 namedb
:
:
:-- Chris

    Never do this.  /etc/namedb and all files in it should be owned by
    root.  Bind should never be allowed to write to those files or that
    directory.  Only the secondary-zone subdirectory (typically /etc/namedb/s)
    should be owned by bind:bind

				-Matt


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200102012228.f11MSg735305>