[OpenIndiana-discuss] OI BIND server

[Mark Creamer]

Yes that wasn't really thinking it through was it :-)
Thanks for the advice James. As a noob, I really appreciate the people
on this list willing to help out.
All is well now
-Mark

On Thu, Apr 12, 2012 at 12:05 PM, James Carlson
<carlsonj at workingcode.com> wrote:
> Mark Creamer wrote:
>> Thanks Dave and Gary for the input. Once I understood where the system
>> messages were going I was able to figure out that I had an issue with
>> the permissions on the named.conf file I was using. I changed two
>> things:
>>
>> 1. chown root:sys /etc/named.conf  (It was root:root)
>> 2. chmod 755 /etc/named.conf
>>
>> Now it starts properly. Can anyone confirm for me that the permissions
>> are correct though? I just want to make sure it's secure and I think
>> 755 might not be restrictive enough??
>
> There's probably not much sense in making a configuration file be
> executable, right?
>
> I'd make it root:root and mode 0640.  /usr/sbin/named normally runs as
> UID root, GID root, but if it's different on your system, you might need
> to adjust.  You could check by doing something like this:
>
> ps -o uid,gid,comm -p `pgrep -d, named`
>
> --
> James Carlson         42.703N 71.076W         <carlsonj at workingcode.com>
>
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss



-- 
Mark