Package: bind9
Version: 1:9.2.4-1sarge1

Hi,

After applying the security update from DSA-1172 to two Sarge systems
that I run the permissions of /etc/bind/rndc.key are set to bind:bind
0640. This prevents rndc from communicating with the daemon and leads to
failure at the next time someone attempts to stop or reload the daemon
via rndc.

Both these systems were originally installed as Woody boxes, and were
subsequently upgraded to Sarge. /etc/default/bind9 does not contain -u
bind in the OPTIONS="" field.

The problem is fixed by reverting the permissions of /etc/bind/rndc.key
to root:root 0640 as it was before the upgrade.

-- 
Matt Brown
[EMAIL PROTECTED]
Mob +64 21 611 544 www.mattb.net.nz

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to