Patch: Updated default NSD permission/locations

2010-10-01 Thread Jakob Schlyter
The following patches makes establish the following default NSD permissions/locations: - /var/nsd/db for stuff that nsd(8) may write to (as user/group _nsd) - /var/nsd/nsd.db for the read-only database. - /var/nsd/zones default zone directory. - /etc/nsd.conf for the config file This still requir

Re: Patch: Updated default NSD permission/locations

2011-01-16 Thread Brad
On Friday 01 October 2010 16:50:33 Jakob Schlyter wrote: > The following patches makes establish the following default NSD > permissions/locations: > > - /var/nsd/db for stuff that nsd(8) may write to (as user/group _nsd) > - /var/nsd/nsd.db for the read-only database. > - /var/nsd/zones default zo

Re: Patch: Updated default NSD permission/locations

2011-01-16 Thread Jakob Schlyter
On 16 jan 2011, at 23.03, Brad wrote: > The release is quickly approaching. The proposed diff still has issues. If > this stuff is not resolved and commited before the release nsd in base > should be disabled. Shipping incomplete and broken stuff isn't very useful > for users. I agree. Do we hav

Re: Patch: Updated default NSD permission/locations

2011-01-17 Thread Jakob Schlyter
On 16 jan 2011, at 23.03, Brad wrote: > The release is quickly approaching. The proposed diff still has issues. If > this stuff is not resolved and commited before the release nsd in base > should be disabled. Shipping incomplete and broken stuff isn't very useful > for users. yes, the proposed d

Re: Patch: Updated default NSD permission/locations

2011-01-17 Thread Jakob Schlyter
On 17 jan 2011, at 23.13, Jakob Schlyter wrote: > NSD in the tree works just fine (although running as root) - it is no worse than it was in 4.8. correction: nsd is of course not running as root, it's running as user _nsd. jakob

Re: Patch: Updated default NSD permission/locations

2011-01-17 Thread Brad
On Monday 17 January 2011 17:13:25 Jakob Schlyter wrote: > On 16 jan 2011, at 23.03, Brad wrote: > > The release is quickly approaching. The proposed diff still has issues. > > If this stuff is not resolved and commited before the release nsd in base > > should be disabled. Shipping incomplete and

Re: Patch: Updated default NSD permission/locations

2011-01-18 Thread Jakob Schlyter
On 18 jan 2011, at 00.44, Brad wrote: > What shipped with 4.8 was incomplete. That is not in a usable state and still > isn't now that binaries are being built and installed. Well you have a > different definition of what "works" means. Do we ship BIND without > the /etc/rc start up bits and /var/

Re: Patch: Updated default NSD permission/locations

2010-10-02 Thread Stuart Henderson
On 2010/10/01 22:50, Jakob Schlyter wrote: > The following patches makes establish the following default NSD > permissions/locations: > > - /var/nsd/db for stuff that nsd(8) may write to (as user/group _nsd) > - /var/nsd/nsd.db for the read-only database. > - /var/nsd/zones default zone directory.

Re: Patch: Updated default NSD permission/locations

2010-10-02 Thread Jakob Schlyter
On 2 okt 2010, at 13.48, Stuart Henderson wrote: > I think it makes sense to do have a separate user for these, that's how > I've been running nsd in the past. did you make nsd-{patch,zonec} drop privs to that user, or did you start them as the user? where did you put nsd.db? I guess a subdir of

Re: Patch: Updated default NSD permission/locations

2010-10-02 Thread Stuart Henderson
On 2010/10/02 15:06, Jakob Schlyter wrote: > On 2 okt 2010, at 13.48, Stuart Henderson wrote: > > > I think it makes sense to do have a separate user for these, that's how > > I've been running nsd in the past. > > did you make nsd-{patch,zonec} drop privs to that user, or did you start them > as