[Bug 194098] New: Incorrect permissions on bind chroot 'master' directory

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194098

            Bug ID: 194098
           Summary: Incorrect permissions on bind chroot 'master'
                    directory
           Product: Base System
           Version: 9.3-RELEASE
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Some People
          Priority: ---
         Component: conf
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: matt at conundrum.com

According to /etc/mtree/BIND.chroot.dist the permissions of
/var/named/etc/named/master inherits an owner:group of root:wheel with the mode
0755.   This should either be bind:wheel 0755 or root:bind 0775.  

Turning on ixfr-from-differences will cause BIND to try to write a journal file
to the master directory, which it will attempt using the user:group of
bind:bind.  There is no way to force the journal file to any other directory
except where the master file resides.

How-To-Repeat: 
* enable ixfr-from-differences in the options stanza
* update a zone with type master
* issue an 'rndc reload' for the zone

A temporary workaround of moving master files into
/var/named/etc/namedb/dynamic is possible, but ignores the conceptual
separation of zone types.

-- 
You are receiving this mail because:
You are the assignee for the bug.