[ Q ] Changing UMASK creation

[Mark.Andrews at nominum.com]

	The files are created with mkstemp() and hence are mode
	0600.  You should not be depending upon the backup files
	being up to date as the nameserver may have changes in the
	journal file.

	The only way to guarentee that you have a up to date copy
	of the zone file is to perform a axfr.

	In general you should not be looking at the files named
	uses to cache its secondary zone files in as they are free
	to change format at anytime.  i.e. we could make them into
	binary representations.  The are private to named and should
	be treated as such.
	
	Mark

> 
> On Tue, May 22, 2001 at 01:49:13PM +0200, Paco Orozco wrote:
> ...
> > I'm running BIND 9.1.1REL with a non-privileged user:
> 
> Change to BIND 9.1.2-REL.
> 
> > # /usr/local/sbin/named -u dns -c /etc/mapes/configuration/named.conf
> > 
> > It's working fine resolving like master and slave request, but, when
> > it create a slave map it creates like:
> > 
> > /etc/mapes/secondary# ll
> > - -rw-------   1 dns      admdns    228237 Apr 25 09:00 197.83
> > - -rw-------   1 dns      admdns       353 Apr 24 21:22 pack.com
> > 
> > We have a group of DNS admins "admdns" in order to view/delete this
> > maps. But, if this maps are saved as above, this group can handle
> > maps.
> > 
> > I'd like that this maps were created with 660 permissions... How can
> > i
> > modify it? Is it possible?
> 
> I believe that the 'umask' was there originally - I can't find anywhere
> in the source code that it's changed.  Try:
> 
> # (umask 022; /usr/local/sbin/named -u dns -c /etc/mapes/configuration/named.
> conf)
> 
> [/etc/mapes?  I had a friend Pete Mapes once.  ;-)]
> 
> -- 
> Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
> OSIS Center Computer Support					EMT-B
> -----------------------------------------------------------------------
> This message is not an official statement of COSPO policies.
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com