Re: [cobalt-users] Bind Update: Anyone installed it?

[flash22@xxxxxxx]

On Sun, 4 Feb 2001, Gerald Waugh wrote:

> "Craig St George" <craig@xxxxxxxxxxxxx>  wrote
> > I just install these no problems
> > one thing though it adds a new user called named
> 
> I don't understand, I installed the RPMs and yes there is a user "named"
> but, I am not sure that there was not the case before installation.

Depends what version of bind you had before, earlier versions of bind only
run as root, if it gets hacked, the hacker gets root access, newer
versions of bind can run as a user so the hacker at most gets user level
access to a user account that's in an unshared group (eg, almost nothing)

There are issues with this sometimes tho, for example bind has to stull be
able to read/write it's zone files and config file, if they were
previously owned and accesible only by root this can cause problems...

I'm guessing cobalt in haste to get this out is doing the best they can to
address some conflicting requirements here...

 > 
> I had no problems (I don't think), and I never changed anything.
> What was the symptom that you corrected by changing the
> init.d/named script?
> I used rpm -U rpm.whatever-the-name-was
> for all three rpms and all seemed to go well.
> Gerald

It was nice of cobalt to include the rebuilt tools :)