From owner-freebsd-questions Mon Aug 20 9:37:43 2001 Delivered-To: freebsd-questions@freebsd.org Received: from nebula.anchoragerescue.org (cable-115-7-237-24.anchorageak.net [24.237.7.115]) by hub.freebsd.org (Postfix) with ESMTP id 70B0837B40D for ; Mon, 20 Aug 2001 09:37:33 -0700 (PDT) (envelope-from akbeech@anchoragerescue.org) Received: from there (galaxy.anchoragerescue.org [24.237.7.95]) by nebula.anchoragerescue.org (Postfix) with SMTP id 716EA145; Mon, 20 Aug 2001 08:37:32 -0800 (AKDT) Content-Type: text/plain; charset="iso-8859-1" From: Beech Rintoul To: "Patrick O'Reilly" Subject: Re: Name Daemon dies on signal 11 ?!? Date: Mon, 20 Aug 2001 08:37:32 -0800 X-Mailer: KMail [version 1.3] References: <008801c12958$f62671a0$b50d030a@patrick> In-Reply-To: <008801c12958$f62671a0$b50d030a@patrick> Cc: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <20010820163732.716EA145@nebula.anchoragerescue.org> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Monday 20 August 2001 01:17 am, you wrote: > Thanks Eric, Len and Edwin... > > I'm busy running the pkg_add as suggested by Len. > > I see that the vulnerability should be fixed in 4.3-RELEASE (which CDs I > just recently received). I'll schedule a re-install with the 4.3 CDs ASAP. > (I guess it's time I set my mind to implementing CVSup ?!?) > > Thanks once again for your quick and helpful responses! > > PS: I see a suggestion in the advisory that 'named' can be run > unprivileged, and chrooted, etc. Would you consider this to be a good > practice for security reasons, regardless of known vulnerabilities? > > (and a little later...) > > PPS: OK - the 'pkg_add -r bind' is done. Now pkg_info says I have version > 9.1.3! I see the new 'named' is in /usr/local/sbin/, and after a reboot > 'named -v' still reports v8.2.3. Any suggestions on the best way to hook > it into /usr/sbin/? I could copy, move, hard/sym link? The original > /usr/sbin/named (v8) is still in-situ. I'm guessing : > % mv /usr/sbin/named /usr/sbin/named.8 # keep v823 for posterity > % ln /usr/local/sbin/named /usr/sbin/named # link v913 into place > > Thanks, > Patrick. There is a complete how-to on replacing the bind dist here: http://www.freebsddiary.org/bind8-from-ports.php Gets everything in the right directories. Beech Micro$oft: "Where can we make you go today?" ------------------------------------------------------------------- Beech Rintoul - IT Manager - Instructor - akbeech@anchoragerescue.org /"\ ASCII Ribbon Campaign | Anchorage Gospel Rescue Mission \ / - NO HTML/RTF in e-mail | P.O. Box 230510 X - NO Word docs in e-mail | Anchorage, AK 99523-0510 / \ ----------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message