Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 May 2000 14:24:09 -0400
From:      Feisal Mohammed <Feisal.O.Mohammed@uwi.tt>
To:        FreeBSD-security Mailing List <freebsd-security@FreeBSD.ORG>
Subject:   Re: pid file for named
Message-ID:  <39219248.7628FC0A@uwi.tt>
References:  <200005161750.KAA71328@sivka.rdy.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Dima Ruban wrote:
> 
> Frank Tobin writes:
> > One often wishes to run daemons such as named under other users, e.g.,
> > bind:bind.  In order to allow bind to write out zones and associated fun
> > stuff correctly, one then does a
> >
> > chmod -R bind:bind /etc/named
> >
> > However, the pid file, /var/run/named.pid, which named tries to write out
> 
> You can set it in named.conf:
> 
> options {
>         ...
>         pid-file "/etc/namedb/run/named.pid";
>         ...
> };
> 
> However, this will break "ncd", since it's looking for /var/run/named.pid
> instead of extracting current "pid-file" value from the named.conf.
> 
> -- dima
> 

That can be fixed as follows, I have two named running
one on the inside interface and the other on the outside
interface.

-Feisal

/* inside interface */
options {
        directory "/etc/namedb";
        listen-on { x.in.si.de; };
        forwarders { x.in.si.de; };
        pid-file "/var/run/named-inside.pid";
};

controls {
        unix "/var/run/ndc-inside"
        perm 0600
        owner xxx
        group xxx;
};


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39219248.7628FC0A>