OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: BIND 9 and OpenBSD 3.3

From: Saad Kadhi (saaddocisland.org)
Date: Fri May 02 2003 - 02:27:10 CDT


On Fri, May 02, 2003 at 03:09:31AM -0400, Reza Muhammad wrote:
> I just upgraded my OpenBSD 3.2 to OpenBSD 3.3, and I'm one of the guy who's lost with BIND4 -> BIND9 migration.
> What I noticed now in /etc/rc.conf in OpenBSD 3.3, there's no more named_user="named" and named_chroot="/var/named". The process also only looks "named" instead of "named -u named -t /var/named". I also noticed some changes in /etc/rc concerning BIND. In OpenBSD 3.2, it looks like:
[snip]
> Should I change named_flags in rc.conf to be named_flags="-u named -t /var/named" ?

no. BIND will run chrooted (/var/named) and as an unpriv user (named) by
default by enabling it (i.e. named_flags="") in /etc/rc.conf (or
/etc/rc.conf.local).

--
Saad Kadhi -- [saaddocisland.org] [saad.kadhihapsis.fr]
[pgp keyid: 35592A6D http://pgp.mit.edu]
[pgp fingerprint: BF7D D73E 1FCF 4B4F AF63 65EB 34F1 DBBF 3559 2A6D]
---