Re: [cobalt-users] regarding named running as root after pkg update...

[SM <nntp@xxxxxxxxx>]

At 22:54 23-03-2001 -0000, you wrote:
>However, one way to combat this is to run the server under a less-privileged
>user, in the case named, so that should a future exploit be found, you would
>be _less_ vulnerable to further damage arising from the dumping of your
>hacker at the shell prompt. Of course, they could still have shell access,
>but at least they're not running with root privileges.

That is correct.  This is why named (BIND) should drop root privileges once
it is started.

-sm