[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: To the bind maintainer



* Onno Ebbinge said:
> >> Please run named with the -u and -g options.
> >> 
> >> Example: root# named -u deamon -g deamon
> >Why don't you just do it yourself? And before posting such mails, please
> 
> I did do it myself!
Great.
 
> >read what's written in the package's README.Debian
> >(/usr/share/doc/bind/README.Debian)
> 
> You are right ofcourse, I now did and I do NOT agree!
> It should be easy, like in other packages, to make a
> post install script that tells you about the problems
> running named non-root and let YOU choose if you want 
> to run named root or non-root! With a little effort 
> you can get more security. 
Did you *really* read what's said in the README.Debian? I'll just quote the
relevant part:

"Note that if you run named as a user other than root, it will not be able to
find new interfaces that appear dynamically, such as during a PCMCIA card
insertion, or if you're running some flavors of IPSEC and/or IP over IP
tunnels."

regards,
marek

Attachment: pgpslXbooI4L2.pgp
Description: PGP signature


Reply to: