On 20/12/2019 15:05, Anand Buddhdev wrote:
> On 20/12/2019 13:56, Alarig Le Lay wrote:
> 
> Hi Alarig,
> 
>> Here is my config file: https://paste.swordarmor.fr/raw/kXaN
>>
>> The content of the dirs (and what I kept in .old):
>> https://paste.swordarmor.fr/raw/IG3K
> 
> You have not shown us the owner/group and permissions of the directories
> themselves. The important one here is /var/run/knot. When knot starts,
> it will switch to user "knot" and then try to create a sock in
> /var/run/knot, as user "knot". But if that directory is owned by root,
> and does not permit user "knot" to write in there, then knot will not be
> able to create its control socket in there.
> 
> The /var/run/knot directory should be owned by user "knot" and group
> "knot", and have mode 0755, or be owned by user "root" and group "knot"
> and have mode 0775.
> 
> You can check the permissions on the directory with:
> 
> ls -ld /var/run/knot
> 
> Regards,
> Anand
> 

Yes yes, all is owned by knot, the gentoo package takes care of this,
and the init corrects the ownership if needed.

kaiminus ~ # ls -lhd /var/lib/knot /var/run/knot/
drwxr-x--- 5 knot knot 4.0K Dec 20 14:42 /var/lib/knot
drwxr-x--- 2 knot knot   80 Dec 19 23:12 /var/run/knot/

kaiminus ~ # rc-service knot stop
 * Caching service dependencies ...                           [ ok ]
 * Stoping knot ...                                           [ ok ]
kaiminus ~ # chown root /var/run/knot/
kaiminus ~ # rc-service knot start
 * /var/run/knot/: correcting owner
 * Starting knot ...                                         [ ok ]
kaiminus ~ # ps aux | grep knot
knot      5156  0.3  0.6 23133348 6892 ?       Ssl  15:16   0:00
/usr/sbin/knotd -d
root      5180  0.0  0.0   7580   816 pts/1    S+   15:17   0:00 grep
--colour=auto knot
-- 
https://lists.nic.cz/mailman/listinfo/knot-dns-users

Reply via email to