Re: FreeBSD Security Advisory: FreeBSD-SA-01:18.bind

From: David Wolfskill (dhw@whistle.com)
Date: 02/01/01


Date: Wed, 31 Jan 2001 15:35:53 -0800 (PST)
From: David Wolfskill <dhw@whistle.com>
To: freebsd-security@FreeBSD.ORG


>Date: Wed, 31 Jan 2001 15:27:25 -0800 (PST)
>From: Matt Dillon <dillon@earth.backplane.com>

> ndc kill's the original bind and starts a new one as root when you use
> 'ndc restart'.

So don't do that -- quite. Use "ndc restart -u bind -g bind" instead.
(Granted, that's more keystrokes to remember & get wrong.... Maybe if
named.pid were structed like sendmail.pid, that would provide a way to
automate the process a little better.)

Cheers,
david

-- 
David Wolfskill      dhw@whistle.com   UNIX System Administrator
Desk: 650/577-7158   TIE: 8/499-7158   Cell: 650/759-0823
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message