conf/128429: Permissions of bind9 chroot 'master' directory

[Dheeraj Reddy]

>Number:         128429
>Category:       conf
>Synopsis:       Permissions of bind9 chroot 'master' directory
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct 28 04:30:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Dheeraj Reddy
>Release:        8.0-current
>Organization:
Intel
>Environment:
FreeBSD vagisha.sudheeraj.net 8.0-CURRENT FreeBSD 8.0-CURRENT #0 r184101: Tue Oct 21 08:09:24 PDT 2008     dheeraj at vagisha.sudheeraj.net:/usr/obj/usr/src/sys/VAGISHA-CURRENT  i386

>Description:
According to /usr/src/etc/mtree/BIND.chroot.dist the permissions ofr

/var/named/etc/namedb/master inherits the permissions/ownership root:wheel.

However, it should be bind:wheel because, if people are using ddns updates, the journal files for the updates need to be created in master/* by the named process that runs with the credentials of bind:wheel


>How-To-Repeat:
Configure ports/net/isc-dhcp3-server with ddns updates 'interim'
>Fix:
Index: BIND.chroot.dist
===================================================================
--- BIND.chroot.dist    (revision 184319)
+++ BIND.chroot.dist    (working copy)
@@ -11,7 +11,7 @@
         namedb
             dynamic uname=bind
             ..
-            master
+            master  uname=bind
             ..
             slave   uname=bind
             ..


>Release-Note:
>Audit-Trail:
>Unformatted: