conf/128429: Permissions of bind9 chroot 'master' directory

Dheeraj Reddy dheeraj at
Tue Oct 28 04:30:02 UTC 2008

>Number:         128429
>Category:       conf
>Synopsis:       Permissions of bind9 chroot 'master' directory
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Oct 28 04:30:01 UTC 2008
>Originator:     Dheeraj Reddy
>Release:        8.0-current
FreeBSD 8.0-CURRENT FreeBSD 8.0-CURRENT #0 r184101: Tue Oct 21 08:09:24 PDT 2008     dheeraj at  i386

According to /usr/src/etc/mtree/BIND.chroot.dist the permissions ofr

/var/named/etc/namedb/master inherits the permissions/ownership root:wheel.

However, it should be bind:wheel because, if people are using ddns updates, the journal files for the updates need to be created in master/* by the named process that runs with the credentials of bind:wheel

Configure ports/net/isc-dhcp3-server with ddns updates 'interim'
Index: BIND.chroot.dist
--- BIND.chroot.dist    (revision 184319)
+++ BIND.chroot.dist    (working copy)
@@ -11,7 +11,7 @@
             dynamic uname=bind
-            master
+            master  uname=bind
             slave   uname=bind


More information about the freebsd-bugs mailing list