Re: bind update keeps messing up write-rights

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2008-07-19 at 10:11 -0700, Ed Warner wrote:
> Othe than my zone files, what else goes
> into /var/named/chroot/var/named/dynamic ?

Nothing.  Assuming we're already in the chroot, or we're not chrooting:

/var/named/
zone files that are set once, or manually altered.

/var/named/dynamic/
zone files that are automatically managed, such as by a DHCP server 
(NB:  The DNS server manages them, communicating with the DHCP server,
the DHCP server doens't directly manipulate the files).

/var/named/slaves/
zone files that will be externally managed by a master DNS server.

I seem to recall the data subdirectory being a location that the server
may dump data to (e.g. statistics).

Protective software, like SELinux, enforces the use of some of those
directories (the DNS server will not be allowed to write slave zone
files to anything other than the slaves subdirectory, etc.).  You'll
probably find more and more segregation of things, as program authors
get more stringent about security, seeing as things like SELinux make
use of file location for setting rules, but zone files have variable
names depending on the zones, but directory names for all of them do not
change.

Have a look at <http://www.isc.org/index.pl?/sw/bind/FAQ.php>, skip down
to the part that mentions SELinux.

-- 
[tim@localhost ~]$ uname -r
2.6.25.10-86.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux