Re: Whom the BIND newest vulnerability concerns?
On Fri, 12 Nov 1999, David Huggins-Daines wrote:
>On Fri, Nov 12, 1999 at 11:56:01AM -0800, Joel Klecker wrote:
>> I'm not sure this offers any major advantage over starting named with -u named
>> -g named.
>
>In fact, -u named is much better, because if you use sudo, named will not be
>able to create its pidfile or the /var/run/ndc socket.
Just have the "named" user be in the "daemon" group, have the /var/run
directory owned by group "daemon" and mode 1775...
--
Electronic information tampers with your soul.
Reply to: