8.2.2 -> 8.2.3 upgrade gotcha's ??

[Mark.Andrews at nominum.com]

> Is there a list of problems to be expected when upgrading from 8.2.2 to
> 8.2.3 ??
> I found at least 2:
> a stricter parsing of zonefiles
> b the definition of NEED_SECURE_DIRECTORY for solaris which
>   caused named to change the perms on the directory containing the
>   ndc socket in stead of the socket itself ( BTW why ??? )

	Because Solaris does not honour the permissions on the
	UNIX domain socket.  To secure the socket you have to
	secure the directory.  This was in the 8.2.2 README
	under SECURITY NOTE. 
	
> 
> To be honest for a release pushed as a replacement for 8.2.2 because
> of security issues the diffences could have been made more clear..
> The NEED_SECURE_DIRECTORY for instance is only mentioned in src/CHANGES
> but no reason. In my case this caused a reload to fail because the dir
> containing the conf file was changed to mode 660.
> 
> 	Paul
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com