Attachment 188311 Details for Bug 279901 – Patch file to resolve the two issues identified. The permission setting for named.log may well be incorrect.

[patch] Patch file to resolve the two issues identified. The permission setting for named.log may well be incorrect.

bind-chroot-admin.in.patch (text/plain), 2.71 KB, created by Quentin Armitage on 2007-09-06 00:53:15 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Quentin Armitage

Created: 2007-09-06 00:53:15 UTC

Size: 2.71 KB

patch

obsolete

>--- bind-chroot-admin.in	2007-07-20 13:53:34.000000000 +0100
>+++ bind-chroot-admin.in.new	2007-09-06 01:49:56.000000000 +0100
>@@ -220,7 +220,7 @@
> 	/usr/bin/find /{etc/{named.*,rndc.*},${BIND_DIR#/}{/*,/data/*,/slaves/*,/dynamic/*}}  -maxdepth 0 -type f |
> 	while read f;
>         do
>-	    replace_with_link ${BIND_CHROOT_PREFIX}/$f $f;
>+	    replace_with_link ${BIND_CHROOT_PREFIX}$f $f;
> 	    [ ! -e $changed ] && touch $changed;
> 	done;
> 	/usr/bin/find /etc/{named.*,rndc.*}.rpmsave ${BIND_DIR}/*.rpmsave  -maxdepth 0 -type l 2>/dev/null |
>@@ -228,6 +228,9 @@
> 	do
> 	    /bin/rm -f $f >/dev/null 2>&1;
> 	done
>+	if [ ! -f ${BIND_CHROOT_PREFIX}/var/log/named.log ]; then
>+		touch ${BIND_CHROOT_PREFIX}/var/log/named.log;
>+	fi;
> 	ln -sf ${BIND_CHROOT_PREFIX}/var/log/named.log /var/log/named.log
> 	pfx=${BIND_CHROOT_PREFIX}
>     else              # chroot is disabled	
>@@ -254,9 +257,12 @@
>     chown -h root:named ${BIND_CHROOT_PREFIX}/var/named/* >/dev/null 2>&1;
>     chown -h root:named /etc/{named,rndc}.* >/dev/null 2>&1;
>     chown -h root:named ${BIND_CHROOT_PREFIX}/etc/{named,rndc}.* >/dev/null 2>&1;
>+    chown -h root:named /var/log/named.log >/dev/null 2>&1;
>+    chown -h root:named ${BIND_CHROOT_PREFIX}/var/log/named.log >/dev/null 2>&1;
>     chmod 750 ${pfx}/var/named  >/dev/null 2>&1;
>     chmod 640 ${pfx}/var/named/* >/dev/null 2>&1;
>     chmod 750 ${pfx}/var/named/*/. >/dev/null 2>&1;
>+    chmod 644 ${pfx}/var/log/named.log >/dev/null 2>&1;
>     chown -h named:named /var/named/{data{,/*},slaves{,/*},dynamic{,/*}} >/dev/null 2>&1;
>     chown -h named:named ${BIND_CHROOT_PREFIX}/var/named/{data{,/*},slaves{,/*},dynamic{,/*}} >/dev/null 2>&1;
>     chmod 770 ${pfx}/var/named/{data,slaves,dynamic} >/dev/null 2>&1;
>@@ -264,7 +270,7 @@
>     chmod 770 ${pfx}/var/named/{data/*/.,slaves/*/.,dynamic/*/.} >/dev/null 2>&1;
>     if [ -e $changed ]; then
> 	if selinux_enabled && [ -x /sbin/restorecon ]; then
>-	   /sbin/restorecon -R ${BIND_CHROOT_PREFIX}/etc ${BIND_CHROOT_PREFIX}/var/named ${BIND_CHROOT_PREFIX}/var/run/named >/dev/null 2>&1;
>+	   /sbin/restorecon -R ${BIND_CHROOT_PREFIX}/etc ${BIND_CHROOT_PREFIX}/var/named ${BIND_CHROOT_PREFIX}/var/run/named ${BIND_CHROOT_PREFIX}/var/log/named.log >/dev/null 2>&1;
> 	   if [ -e ${BIND_CHROOT_PREFIX}/etc/localtime ] && [ -e /etc/localtime ] ; then 
> 	      /usr/bin/restorecon ${BIND_CHROOT_PREFIX}/etc/localtime >/dev/null 2>&1;
> 	   fi;		
>@@ -276,6 +282,7 @@
> 	   /sbin/restorecon /var/named/named.ca ${BIND_CHROOT_PREFIX}/var/named/named.ca  >/dev/null 2>&1;
> 	   /sbin/restorecon ${BIND_CHROOT_PREFIX} >/dev/null 2>&1;
> 	   /sbin/restorecon /var/named/named.ca >/dev/null 2>&1;
>+	   /sbin/restorecon /var/log/named.log >/dev/null 2>&1;
> 	fi;
> 	/sbin/service named try-restart
> 	rm -f $changed;

Actions: View | Diff

Attachments on bug 279901: 188311