Bug 186599

Summary:	net-dns/bind9 user name should be configurable
Product:	Gentoo Linux	Reporter:	Matus UHLAR - fantomas <uhlar>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED CANTFIX
Severity:	enhancement	CC:	uhlar
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Matus UHLAR - fantomas 2007-07-25 15:57:27 UTC

It should be configurable which user will bind run under. Currently, user 'named' is hardcoded in startup script, but we prefer our own security model in our heterogenous network.

Reproducible: Always



Expected Results:  
there should be option USER="" in /etc/conf.d/named, which, if set, would change the user from named. the "named" can be default in /etc/conf.d/named and/or /etc/init.d/named, but it should be configurable

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2007-07-25 16:02:33 UTC

Not possible, would break directory permissions among others (/var/run, /var/bind etc.), see the ebuild.

Comment 2 Matus UHLAR - fantomas 2007-07-25 16:11:53 UTC

A simple warning about this issue should be enough imho.
We do not use standard hierarchy, also because of this issue (default permissions).
I found one-time changing conf.d/bind nicer than repeated change of init script.

Comment 3 Jakub Moc (RETIRED) gentoo-dev

2007-07-25 16:17:42 UTC

See, if you dislike the current ebuild, create your own in your overlay, this is plain not worth the trouble.