diff options
| author | dougb <dougb@FreeBSD.org> | 2004-03-14 19:10:06 +0000 |
|---|---|---|
| committer | dougb <dougb@FreeBSD.org> | 2004-03-14 19:10:06 +0000 |
| commit | 454914fc9f0a10637ca62e1ec36ceb40dc1cff1c (patch) | |
| tree | fa53015b5d9c8163861501f9076770f51faa4760 /etc/defaults | |
| parent | 49840535480459dfac02d861688ee858e596bde3 (diff) | |
| download | FreeBSD-src-454914fc9f0a10637ca62e1ec36ceb40dc1cff1c.zip FreeBSD-src-454914fc9f0a10637ca62e1ec36ceb40dc1cff1c.tar.gz | |
1. Remove the named_rcng variable. Mike's caution in this area was a good
thing, but we're ready to move on.
2. Remove the -g default argument in named_flags. It doesn't actually do
what most users think it does, and what most users want it to do is already
accomplished with a proper default group for the bind user, which we have.
Also, the -g knob does something entirely different in BIND 9, which leads
to a lot of needless confusion/aggravation.
3. In the rc.d script, don't bogusly override $command, or $rc_flags. Both
are adequately handled in rc.conf[.local].
4. DO properly override $rc_flags if user has named_chrootdir set.
This may need to be revisited, but should be ok for now.
5. Protect all chrootdir-related bits under that variable, instead of
named_rcng.
There is more work to be done here, especially in the area of BIND 9
compatibility, but this is a start at least.
Prompted in part by (legitmate) grousing from: kuriyama, Randy Bush
Diffstat (limited to 'etc/defaults')
| -rw-r--r-- | etc/defaults/rc.conf | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf index fe84b8d..d6b76d8 100644 --- a/etc/defaults/rc.conf +++ b/etc/defaults/rc.conf @@ -145,12 +145,9 @@ inetd_flags="-wW -C 60" # Optional flags to inetd # named. It may be possible to run named in a sandbox, man security for # details. # -named_rcng="NO" # XXX Temporary. Enable to use new rc - # functionality in support of named. See - # variables below. named_enable="NO" # Run named, the DNS server (or NO). named_program="/usr/sbin/named" # path to named, if you want a different one. -named_flags="-u bind -g bind" # Flags for named +named_flags="-u bind" # Flags for named named_pidfile="/var/run/named/pid" # Pid file named_chrootdir="" # Chroot directory (or "" not to auto-chroot it) named_chroot_autoupdate="YES" # Automatically install/update chrooted |
