[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Running Bind as non Root



> I just installed bind-update.pkg  and it 
> runs under user "root". I heard that named 
> should not run as user "root". Could someone
> provide an alterative answer and maybe a resolution?

Personally, I'd change that sucker today... Here's how
(insert standard disclaimer here):

First create a user/group called "named" as such:

useradd -c "Named" -u 25 -s /bin/false -r -d
/var/named named 2>/dev/null || :

(note the caps on Named in the first part is not a
typo). 

This setup will send anyone who *does* get in on
named, straight to null (hell)

Then simply make the following little change in
/etc/rc.d/init.d/named

Inside /etc/rc.d/init.d/named there are 2 instances
of:

daemon named

change both of these to:

daemon named -u named -g named

then restart named as such:

/etc/rc.d/init.d/named restart

and you're all set..

Cheers!
Scott

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/