mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-11 04:09:59 -04:00
mention that if the server is running setuid, it won't be able to bind to new
privileged ports on reload.
This commit is contained in:
parent
dfceef7e68
commit
1e78000f6e
1 changed files with 4 additions and 2 deletions
|
|
@ -2,7 +2,7 @@
|
|||
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.0//EN"
|
||||
"http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd">
|
||||
|
||||
<!-- File: $Id: Bv9ARM-book.xml,v 1.101 2001/02/06 16:50:25 gson Exp $ -->
|
||||
<!-- File: $Id: Bv9ARM-book.xml,v 1.102 2001/02/07 00:57:53 bwelling Exp $ -->
|
||||
|
||||
<book>
|
||||
|
||||
|
|
@ -4864,7 +4864,9 @@ to copy system libraries over to your <command>chroot()</command> sandbox.</para
|
|||
the <command>touch</command> utility (to change file access and
|
||||
modification times) or the <command>chown</command> utility (to
|
||||
set the user id and/or group id) on files to which you want <acronym>BIND</acronym>
|
||||
to write.</para></sect2></sect1>
|
||||
to write. Note that if the <command>named</command> daemon is running as a
|
||||
nonprivileged user, it will not be able to bind to new restricted ports if the
|
||||
server is reloaded.</para></sect2></sect1>
|
||||
<sect1 id="dynamic_update_security"><title>Dynamic Update Security</title>
|
||||
<para>Access to the dynamic
|
||||
update facility should be strictly limited. In earlier versions of
|
||||
|
|
|
|||
Loading…
Reference in a new issue