|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] changing permissions for libraries in a named chroot
|
[...]
On the 18th day of December in the year 2003 you wrote:
> Date: Thu, 18 Dec 2003 11:36:59 -0500
> From: sean finney <seanius@seanius.net>
> To: plug <plug@lists.phillylinux.org>
> Subject: [PLUG] changing permissions for libraries in a named chroot
>
> hey guys,
>
> i'm completely stupefied on this one.
>
> i have a server running bind 8 in a chroot jail. it's the master for
> a few zones and slave to a few more. every now and then, it breaks
> for its slave zones, with the following message in the logs:
>
> 18-Dec-2003 11:20:29.004 default: error: can't exec /bin/named-xfer: Permission denied
>
> the problem ended up being that the permissions on the libraries in the
> chroot weren't set with the execute bit, which was apparently necessary.
> so when a master zone for our slave changed their dns records, we
> couldn't transfer the new record, and as soon as the old record expired,
> our server would _completely drop the zone_, answering authorative "does
> not exist" for every name in the zone!
>
> so i chmod a+x'd all the libraries, restarted named, and everything
> started working again. however, about a month later[1] the problem came
> back. same fix, and it worked again. and now, it happened again. i
> have no idea what could be changing these permissions on me. the system
> does not have any startup scripts, cron jobs, or at jobs that call chmod
> on those files. does named/named-xfer do something under the hood
> to these files?
>
> has this happened to anyone else?
>
>
> thanks for any insight,
> sean
>
> [1] that was the next time the symptoms arose, which only happens after
> the permissions have changed _and_ a master updates their zone info
>
When you created the chroot jail, did you copy the library files into the
jailed area or use hard links?
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|