> > And I still think this is a stupid reason for us to be allowing a > security problem to sit around--how many people run dns servers on > machines with dynamic addresses? Agree. I was just elaborating on the way to do it "idiot-proof". If you have any of the pcmcia, ppp, etc installed ask the user "Do you want to run bind as root". Otherwise not simply run it as user. Chroot it as well. Brgds,
Attachment:
pgpczZJs64p3F.pgp
Description: PGP signature