Bind version 8, as shipped in Debian, still runs as superuser by default. Since Bind version 9 does not do so any longer (#149059), and has been shipped with a non-root default for quite some time already (almost 4 years!) isn't it time bind8 was changed too?
Regards Javier PD: The patch in #157245 might need to be revised, since it does not include the code to create the user on postinst. It might be useful to review the "Creating users and groups for software daemons" section in the Securing Debian Manual for sample code: http://www.debian.org/doc/manuals/securing-debian-howto/ch9.en.html#s-bpp-lower-privs
signature.asc
Description: Digital signature
