Bug 26949 - bind compiled with thread support
Summary: bind compiled with thread support
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: bind   
(Show other bugs)
Version: 7.1
Hardware: i386
OS: Linux
Target Milestone: ---
Assignee: Bernhard Rosenkraenzer
QA Contact: David Lawrence
Keywords: Security
Depends On:
TreeView+ depends on / blocked
Reported: 2001-02-10 14:38 UTC by Matt Burke
Modified: 2007-03-27 03:40 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2001-02-10 14:38:45 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description Matt Burke 2001-02-10 14:38:25 UTC
Just upgraded 7.0 to fisher.  The installer falls over so I upgraded the
RPMs by hand, although this shouldn't have any bearing on the issue.

The problem is that named has been compiled with thread support meaning
that on a single-cpu machine it has to be run as root.  This is a terrible
security flaw, especially with the bugs reported in BIND the other week.

[root@queeg /root]# rpm -q bind

Comment 1 Bernhard Rosenkraenzer 2001-02-12 14:43:31 UTC
named with thread support does NOT need to run as root if you're running kernel
fisher is 2.4.x based, so there is no problem.

On a side note, the bugs found recently were in the bind 8.x code base, not 9.x.
9.x is a complete rewrite because 8.x sucked. Running it as root is still a bad
thing though. Fortunately it's not necessary.

Note You need to log in before you can comment on or make changes to this bug.