Re: is it safe to chmod +s named?

2008-10-29 Thread Adam Tkac
On Wed, Oct 29, 2008 at 01:15:58PM +1100, Mark Andrews wrote: In message [EMAIL PROTECTED], Jeff Pang writes: Hello, I need to let apache start/stop named. I set: chmod +s named, so httpd (run with nobody) can stop/start it. Is it safe for this behavior? thanks. In general,

Re: is it safe to chmod +s named?

2008-10-28 Thread Jeremy C. Reed
On Tue, 28 Oct 2008, Jeff Pang wrote: I need to let apache start/stop named. I set: chmod +s named, so httpd (run with nobody) can stop/start it. Is it safe for this behavior? thanks. How does your named listen on network socket? Can you use rndc reconfig or rndc reload instead?

Re: is it safe to chmod +s named?

2008-10-28 Thread Mark Andrews
In message [EMAIL PROTECTED], Jeff Pang writes: Hello, I need to let apache start/stop named. I set: chmod +s named, so httpd (run with nobody) can stop/start it. Is it safe for this behavior? thanks. In general, no. Named is not designed to be run suid root. A ordinary

Re: is it safe to chmod +s named?

2008-10-28 Thread Bryan Irvine
On Tue, Oct 28, 2008 at 7:15 PM, Mark Andrews [EMAIL PROTECTED] wrote: In message [EMAIL PROTECTED], Jeff Pang writes: Hello, I need to let apache start/stop named. I set: chmod +s named, so httpd (run with nobody) can stop/start it. Is it safe for this behavior? thanks. In

Re: is it safe to chmod +s named?

2008-10-28 Thread Jeff Pang
[EMAIL PROTECTED] wrote: From: Jeremy C. Reed [EMAIL PROTECTED] Subject: Re: is it safe to chmod +s named? To: Jeff Pang [EMAIL PROTECTED] Cc: bind-users@isc.org Date: Tuesday, October 28, 2008, 10:06 PM On Tue, 28 Oct 2008, Jeff Pang wrote: I need to let apache start/stop named. I set