Re: [cobalt-security] profile of a bind worm

[Kevin D]

From: "Jabie Gray" <[EMAIL PROTECTED]>

> My named is running as root too.

Bad idea.

> I see two instances of the daemon function in the /etc/rc.d/init.d/named
> script. One is for start, the other is for hard restart.
> Do I need to change both of them to use -u & -g options?

Yes you should.

> Do I need to create the user and group of named?

Maybe. Check your /etc/passwd file. My guess is probably not.

Kevin

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security