Re: [cobalt-users] Running Bind as non Root

[Rik Thomas <rikt@xxxxxxxxxxxxxxxx>]

On Thu, 23 Aug 2001, Ja wrote:

>  Hi,
>  I just installed bind-update.pkg  and it runs under user "root". I heard that named should not run as user "root". Could someone
> provide an alterative answer and maybe a resolution?
>
> thanks
>
> Ja

While I don't advocate running your dns on a cobalt server many do and do
it quite well.  I used this article when working on my name serves as a
how to and to better educate myself on bind and it's related problems.

http://www.sans.org/infosecFAQ/DNS/sec_BIND.htm

disclaimer, I have no idea if all of this would work on a cobalt box.  But
it should work.

Remember, if someone hacks a service that runs as root they get root
access with all of it's privledges.  If you run something as named and
only give it access to one particular directory and files with very
limited rights on your machine then they only inherit named access, a
great enhancer to your security.


-- 
Rik Thomas
rikt@xxxxxxxxxxxxxxxx http://SmartBackups.com
Is your Website Smart? Automated Website backups.  Free 30Day trial!
Ph: 302.672.7314 Fx: 302.672.7315 ICQ: 879956