Error in NT event Log

Danny Mayer mayer at gis.net
Wed Feb 7 03:16:02 UTC 2001


At 11:59 PM 2/5/01, Thor Kottelin wrote:



>Danny Mayer wrote:
>
> > At 01:31 PM 2/5/01, Don Pierce wrote:
>
> > >App: W 'Mon Feb 05 09:36:27 2001': named - " directory
> > >c:_winnt_system32_dns_etc is world-writable  "
>
> >          It's just telling you that anyone can write to the named default directory
> >    where you placed your configuration files.
>
> > >Is the Worl-writable a problem?
> > 
> >          No as long as other people don't log into the box.  If you trust them then
> >    there's no problem.  If you don't trust them they shouldn't be allowed on the box.
>
>Especially it's not a problem when the directory, in fact, is not
>world-writable.
>
>directory C:\\WINNT\\system32\\dns-bind is world-writable
>
>C:\TEMP>cacls C:\WINNT\system32\dns-bind
>C:\WINNT\system32\dns-bind <Account Domain not found>(OI)(IO)F
>                            <Account Domain not found>(CI)F
>                            NT AUTHORITY\SYSTEM:(OI)(IO)F
>                            NT AUTHORITY\SYSTEM:(CI)F
>                            BUILTIN\Administrators:(OI)(IO)F
>                            BUILTIN\Administrators:(CI)F

         Right.  I didn't write or modify the directory access checking code and I
don't have time to chase it.  This is not unexpected.  I'm not expecting to change
this in BIND 8.

         Danny



More information about the bind-users mailing list