[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] regarding named running as root after pkg update...



At 12:27 23.03.01 +0100, you wrote:
Hi Glen,

> What problems could occur if named continues running as root?

Dunno if the bind exploit(s) can actually yield shell access (probably), but
if that's the case it'll be a ROOTSHELL (!!!) in your case!

Don't even consider running a daemon as root when it's not absolutely
necessary. I'll refrain from using more exlamation marks. You've had your
dose. ;-)

Have a safe one... Nico

I tried the suggestions running BIND as user named, but on my RaQ3 there's no user named. Can I just "adduser named" and then run BIND under that user?
In other words: Whats the correct procedure to achieve this?

TIA
Marc Landtwing