Red Hat Bugzilla – Bug 26949
bind compiled with thread support
Last modified: 2007-03-26 23:40:48 EDT
Just upgraded 7.0 to fisher. The installer falls over so I upgraded the
RPMs by hand, although this shouldn't have any bearing on the issue.
The problem is that named has been compiled with thread support meaning
that on a single-cpu machine it has to be run as root. This is a terrible
security flaw, especially with the bugs reported in BIND the other week.
[root@queeg /root]# rpm -q bind
named with thread support does NOT need to run as root if you're running kernel
fisher is 2.4.x based, so there is no problem.
On a side note, the bugs found recently were in the bind 8.x code base, not 9.x.
9.x is a complete rewrite because 8.x sucked. Running it as root is still a bad
thing though. Fortunately it's not necessary.