Re: isc_log_open 'named.run' failed

2005-08-29 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake "Todd C. Miller" (Todd.Miller): > If you know the exact pathnames named is trying to use you may be > able to just create them in the right place, owned by user named. If all you need to write is the dump file you should be able to add something lik

Re: isc_log_open 'named.run' failed

2005-08-29 Thread Theo de Raadt
> If this is the stock BIND that ships with OpenBSD, shouldn't it just work > without any permissions/ownership changes? OpenBSD does not ship with a stock BIND. It has privilege seperation added, which has already saved us from problems a few times. Yes, that means there might be some new small

Re: isc_log_open 'named.run' failed

2005-08-29 Thread Spruell, Darren-Perot
From: Todd C. Miller [mailto:[EMAIL PROTECTED] > In message <[EMAIL PROTECTED]> > so spake Hans Almqvist (hasse): > > > Ok. I found the answer myself. > > User named must be able to write to /var/named > > What would be the right thing ? > > Leting named own /var/named or having named be > >

Re: isc_log_open 'named.run' failed

2005-08-29 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake Hans Almqvist (hasse): > Ok. I found the answer myself. > User named must be able to write to /var/named > What would be the right thing ? > Leting named own /var/named or having named be > member of group wheel and have write permission on group whe

Re: isc_log_open 'named.run' failed

2005-08-29 Thread Hans Almqvist
Ok. I found the answer myself. User named must be able to write to /var/named What would be the right thing ? Leting named own /var/named or having named be member of group wheel and have write permission on group wheel ? I am thinking of security here. /Hasse Hans Almqvist wrote: Hi all! I a