Re: Changes to named

"Neal D. Becker" <[email protected]>
Newsgroups gmane.linux.redhat.rhl.beta,gmane.linux.redhat.fedora.testers
Message-ID <[email protected]>
On Thursday 06 November 2003 07:51 am, Douglas Furlong wrote:
> On Thu, 2003-11-06 at 12:39, Neal D. Becker wrote:
> > On Wednesday 05 November 2003 09:20 pm, Alexandre Oliva wrote:
> > > On Nov  5, 2003, "Neal D. Becker" <[email protected]> wrote:
> > > > I see in release notes that the permissions/ownerships of named files
> > > > have changed.  Is it OK to install (clean), then restore my
> > > > backed-up /var/lib/named and /etc/named.conf, or will I have to
> > > > change ownerships/permissions?
> > >
> > > Err...  Release Notes anyone?
> > >
> > >      o The BIND nameserver has had its security tightened. The
> > > /var/named/ directory is no longer owned by "named", but rather by
> > > "root". Slave zone files should now be stored in the new
> > > /var/named/slaves/ directory, which is owned by "named". In addition, a
> > > new bind-chroot package makes it possible to run the named daemon in a
> > > chroot() "jail" (located in /var/named/chroot/) for greater security.
> >
> > Thanks, but I already read the release notes.  My question is, if I
> > simply restore my old named setup, overwriting the new
> > permissions/ownerships with the old ones, will named break?
>
> Hi Alexandre.
>
> I am guessing that this will probably prevent bind from starting.
>
> However, as it is only an ownership change (it would appear), it should
> be fairly easy to run chown -R on the required directory, affecting all
> the files, and then again, one level lower on the slaves directory.
>
> However it would appear, if you have slaves set up, you will also have
> to alter the named.conf file so that the slaves files are placed in the
> right directory.
>

What is the upgrade procedure for RH9 to fedora on a system which is named 
master?  Slave?  Will upgrade fix everything automatically? (This is an 
important question)


--
fedora-test-list mailing list
[email protected]
http://www.redhat.com/mailman/listinfo/fedora-test-list
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.