Re: BIND running setuid with interface changes

Eugene M. Kim wrote:
[snip]
Then, when a new address comes up (such as on a dynamically created L2TP
tun(4) interface), BIND tries to listen on it, but fails because it is
running setuid as bind:

Dec 27 02:32:00 home named[1121]: listening on IPv4 interface tun0, 10.0.2.129#53
Dec 27 02:32:00 home named[1121]: could not listen on UDP socket: permission denied

The only workarounds that I can think of is either to run BIND as setuid
root, or to restart (not reload) BIND every time a new VPN connection
comes up, both of which I am not comfortable with.

Any better ideas?

mac_portacl(4)

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-portacl.html

--
Skip
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: LDAP Lookup failure
    ... bind but LDP can, then that should clear ldap for you. ... ldap to bind to the server. ... When it fails can you also do a forward and reverse lookup of the host name ...
    (microsoft.public.windows.server.active_directory)
  • Re: DataBindings.Add
    ... What looks suspicious is that you are trying to bind to a DataRow. ... When I attempt to accomplish the same task with the dynamcally instantiated Control it fails. ... In the code below you will see a line that calls the function DeepCloneControl. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: bind: Cant assign requested address using ssh (or anything else)
    ... ask or configurations to look at. ... Could not request local forwarding. ... Ofcourse it fails, you are trying to bind to address 127.0.0.3, ...
    (freebsd-questions)
  • Re: Bind fails with an error port is in use.
    ... error but still bind fucntion fails with error that port is in use. ... and switching to another user and try to run my server application. ...
    (comp.sys.mac.programmer.help)
  • Re: Sockets...bind() fails..
    ... There is no specific error no. all i get is -1 for ERROR when bind ... fails. ... You're referring to bind's return value but Carl suggested the error ... strerrorand the global variable errno. ...
    (comp.os.vxworks)