Re: permissions for DNSSEC zone signing

2013-07-23 Thread Doug Barton
On 07/23/2013 04:48 PM, David Newman wrote: On 7/23/13 3:44 PM, Mark Andrews wrote: In message <51ef00af.4090...@networktest.com>, David Newman writes: FreeBSD 9.1-RELEASE-p4, BIND 9.9.3-P1 ESV installed from ports [...] zone "example.org" { type master; file "master/exa

Re: permissions for DNSSEC zone signing

2013-07-23 Thread David Newman
On 7/23/13 3:44 PM, Mark Andrews wrote: > In message <51ef00af.4090...@networktest.com>, David Newman writes: >> FreeBSD 9.1-RELEASE-p4, BIND 9.9.3-P1 ESV installed from ports >> >> What are the correct directory and file permissions for DNSSEC static >> zone signing with bind? >> >> By default,

Re: permissions for DNSSEC zone signing

2013-07-23 Thread Mark Andrews
In message <51ef00af.4090...@networktest.com>, David Newman writes: > FreeBSD 9.1-RELEASE-p4, BIND 9.9.3-P1 ESV installed from ports > > What are the correct directory and file permissions for DNSSEC static > zone signing with bind? > > By default, everything in /var/named/etc/namedb is owned by

permissions for DNSSEC zone signing

2013-07-23 Thread David Newman
FreeBSD 9.1-RELEASE-p4, BIND 9.9.3-P1 ESV installed from ports What are the correct directory and file permissions for DNSSEC static zone signing with bind? By default, everything in /var/named/etc/namedb is owned by bind except for the master directory. For example: drwxr-xr-x bind wheel dynami