Skip to Content.
Sympa Menu

sm-grimoire - RE: [SM-Grimoire] named running as bind user

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: FubecaPobre AT netscape.net
  • To: seth AT tautology.org (Seth Woolley)
  • Cc: evraire AT tuwg.com, sm-grimoire AT lists.ibiblio.org
  • Subject: RE: [SM-Grimoire] named running as bind user
  • Date: Mon, 06 Oct 2003 17:21:08 -0400

The user 'bind' does exist, but the initial group is set to 'nogroup'. I'm
not sure if that's by design or not. I double-checked the permissions in my
/etc/bind directory and all files are owned by bind:bind (that's user bind
and group bind), including the sub-directory 'zones' and the zone file
'127.0.0' found within the 'zones' sub-directory.

I'll double-check them tonight, as well as the symlinks and such, and let you
know what I find.

Just out of curiosity, where does all the 'chroot' logic take place? It
wasn't apparent in the init script.

Thanks!

Seth Woolley <seth AT tautology.org> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>It should be running chrooted by default:
>from: ps auxw
>bind 474 0.0 1.4 4728 3624 ? S Sep21 1:33 named -u bind
>-t /etc/bind
>
>The -t is the chrooted directory. It can run either in or out of it
>because I use fancy symlinks when I made the spell support chrooting.
>/etc/bind itself is actually in /var/chroot/bind (IIRC) to prevent a DoS
>on the /etc/ filesystem.
>
>Does the bind user exist? The spell works fine on my box, and I sent a
>note out to the MLs that I had experimented with getting named in chroot
>working, and I incorporated what comments I got. Maybe you edited a file
>as root and so it got saved as root-owned? If you find out if the spell
>is doing anything wrong, let me know.
>
>Seth
>
>On Mon, 6 Oct 2003 evraire AT tuwg.com wrote:
>
>>
>> > Pardon my ignorance, but how would I tell if it's being run in a
>> > chrooted environment?
>>
>> Good question! Unfortunately I'm on a Wintendo box at the moment so can't
>> check out my setup. :/ Your best bet will be to hope the author or
>> maintainer of the spell hears your call for help and answers. :) If I
>> think of it I'll double check myself when I get home.
>>
>> Good luck!
>>
>> Jonathan Evraire
>> evraire at tuwg.com
>>
>>
>> -----------------------------------------
>> Message sent via Toad-One
>> Anti-spam notice, this message originated from IP Address: 199.212.215.11
>> -----------------------------------------
>> _______________________________________________
>> SM-Grimoire mailing list
>> SM-Grimoire AT lists.ibiblio.org
>> http://lists.ibiblio.org/mailman/listinfo/sm-grimoire
>>
>
>- --
>Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
>Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
>Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.2.2 (FreeBSD)
>
>iD8DBQE/gdGX7fQ833vqzH0RAiFuAJ9xaO4WTzA659wFw4vpYHrEAUGiTgCgtTfv
>abmHk/LrTOUkN6gDC2tIF+M=
>=J1WW
>-----END PGP SIGNATURE-----
>
>

__________________________________________________________________
McAfee VirusScan Online from the Netscape Network.
Comprehensive protection for your entire computer. Get your free trial today!
http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397

Get AOL Instant Messenger 5.1 free of charge. Download Now!
http://aim.aol.com/aimnew/Aim/register.adp?promo=380455




Archive powered by MHonArc 2.6.24.

Top of Page