mention that if the server is running setuid, it won't be able to bind to new

privileged ports on reload.
This commit is contained in:
Brian Wellington 2001-02-07 00:57:53 +00:00
parent dfceef7e68
commit 1e78000f6e

View file

@ -2,7 +2,7 @@
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.0//EN"
"http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd">
<!-- File: $Id: Bv9ARM-book.xml,v 1.101 2001/02/06 16:50:25 gson Exp $ -->
<!-- File: $Id: Bv9ARM-book.xml,v 1.102 2001/02/07 00:57:53 bwelling Exp $ -->
<book>
@ -4864,7 +4864,9 @@ to copy system libraries over to your <command>chroot()</command> sandbox.</para
the <command>touch</command> utility (to change file access and
modification times) or the <command>chown</command> utility (to
set the user id and/or group id) on files to which you want <acronym>BIND</acronym>
to write.</para></sect2></sect1>
to write. Note that if the <command>named</command> daemon is running as a
nonprivileged user, it will not be able to bind to new restricted ports if the
server is reloaded.</para></sect2></sect1>
<sect1 id="dynamic_update_security"><title>Dynamic Update Security</title>
<para>Access to the dynamic
update facility should be strictly limited. In earlier versions of