Error in NT event Log
Danny Mayer
mayer at gis.net
Wed Feb 7 03:16:02 UTC 2001
At 11:59 PM 2/5/01, Thor Kottelin wrote:
>Danny Mayer wrote:
>
> > At 01:31 PM 2/5/01, Don Pierce wrote:
>
> > >App: W 'Mon Feb 05 09:36:27 2001': named - " directory
> > >c:_winnt_system32_dns_etc is world-writable "
>
> > It's just telling you that anyone can write to the named default directory
> > where you placed your configuration files.
>
> > >Is the Worl-writable a problem?
> >
> > No as long as other people don't log into the box. If you trust them then
> > there's no problem. If you don't trust them they shouldn't be allowed on the box.
>
>Especially it's not a problem when the directory, in fact, is not
>world-writable.
>
>directory C:\\WINNT\\system32\\dns-bind is world-writable
>
>C:\TEMP>cacls C:\WINNT\system32\dns-bind
>C:\WINNT\system32\dns-bind <Account Domain not found>(OI)(IO)F
> <Account Domain not found>(CI)F
> NT AUTHORITY\SYSTEM:(OI)(IO)F
> NT AUTHORITY\SYSTEM:(CI)F
> BUILTIN\Administrators:(OI)(IO)F
> BUILTIN\Administrators:(CI)F
Right. I didn't write or modify the directory access checking code and I
don't have time to chase it. This is not unexpected. I'm not expecting to change
this in BIND 8.
Danny
More information about the bind-users
mailing list