Russell Coker (russell@xxxxxxxxxxxx) said:
> > > This is a serious problem. How was the rndc.key file created?
> >
> > %post of bind.
>
> Which program in the bind postinst does this?
postinstall scriptlet (using /bin/sh):
/sbin/chkconfig --add named
if [ -f etc/named.boot -a ! -f etc/named.conf ]; then
if [ -x /usr/sbin/named-bootconf ]; then
cat etc/named.boot | /usr/sbin/named-bootconf > etc/named.conf
chmod 644 etc/named.conf
fi
fi
if [ ! -e /etc/rndc.key.rpmnew ]; then
sed -e "s/@KEY@/`/usr/sbin/dns-keygen`/" /etc/rndc.key >/etc/rndc.key.tmp
mv -f /etc/rndc.key.tmp /etc/rndc.key
fi
chmod 0640 /etc/rndc.conf etc/rndc.key
chown root:named /etc/rndc.conf etc/rndc.key
/sbin/ldconfig
exit 0
sed & mv, actually.
Bill
