named

QNX Newsgroups (Archives) qdn.public.qnx4
1

I am trying to get named to start then change its user:group to
something other than root:root. The usage (use named) and the online doc
refers to the -u and -g options. However, when I do this, I simply get
another usage message - minus the -u and -g options - and then it quits.

I have a [QNX] customer about to undergo a security audit, and with
holes found in a recent version of a named (forget which one) I am keen
to be able to run the DNS as non-root.

The TCPIP runtime being used is 4.25C with QNX 4.25.

Is there a more recent named that will run as something other than root?
And is also secure?

Geoff Roberts

2

Was this a stupid question or simply too hard???

Geoff.

Geoff Roberts wrote:

I am trying to get named to start then change its user:group to
something other than root:root. The usage (use named) and the online doc
refers to the -u and -g options. However, when I do this, I simply get
another usage message - minus the -u and -g options - and then it quits.

I have a [QNX] customer about to undergo a security audit, and with
holes found in a recent version of a named (forget which one) I am keen
to be able to run the DNS as non-root.

The TCPIP runtime being used is 4.25C with QNX 4.25.

Is there a more recent named that will run as something other than root?
And is also secure?

Geoff Roberts

3

Geoff,

haven’t used bind server on qnx but I am using it on linux for
a long time, -u -g works fine. Your problem sounds like getopt
issue. If you are concern with named and security, you should
probably run it in a chroot jailed environment. Check
http://www.ibiblio.org/pub/Linux/docs/HOWTO/Chroot-BIND-HOWTO

Frank

Geoff Roberts wrote:

I am trying to get named to start then change its user:group to
something other than root:root. The usage (use named) and the online doc
refers to the -u and -g options. However, when I do this, I simply get
another usage message - minus the -u and -g options - and then it quits.

I have a [QNX] customer about to undergo a security audit, and with
holes found in a recent version of a named (forget which one) I am keen
to be able to run the DNS as non-root.

The TCPIP runtime being used is 4.25C with QNX 4.25.

Is there a more recent named that will run as something other than root?
And is also secure?

Geoff Roberts