bind and fc6

[David G. Miller]

Tim <ignored_mailbox at yahoo.com.au> wrote:

> On Fri, 2007-02-02 at 14:51 +0000, Stuart Sears wrote:
>   
>> > True but AFAIK you need root privileges to do this and named drops
>> > these as soon as it is chrooted. 
>>     
>
> Why would BIND need root in the first place?  It only has to read its
> own files, it doesn't have to write any system ones.
In order to open the privileged ports used by a nameserver.

nameserver      42/tcp          name            # IEN 116
nameserver      42/udp          name            # IEN 116

Lots of services only need to be root in order to open their service 
port (e.g., httpd).  They then become a normal user and some, such as 
bind, switch to a chroot jail.

Cheers,
Dave

-- 
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce