[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Fw: [cobalt-users] Bind Update: Anyone installed it?



Forwarding this to the list, I don't know what happened to the reply-to
on this list???

> flash22@xxxxxxx <flash22@xxxxxxx> wrote
> > Depends what version of bind you had before, earlier versions of bind only
> > run as root, if it gets hacked, the hacker gets root access, newer
> > versions of bind can run as a user so the hacker at most gets user level
> > access to a user account that's in an unshared group (eg, almost nothing)
> > 
> > There are issues with this sometimes tho, for example bind has to stull be
> > able to read/write it's zone files and config file, if they were
> > previously owned and accesible only by root this can cause problems...
> > 
> > I'm guessing cobalt in haste to get this out is doing the best they can to
> > address some conflicting requirements here...
> > 
Gerald wrote
> Well, maybe I am in trouble then, cause my named is running as root.
> How would I go about changing it?
> Gerald
> 
>