bind: fix daemon startup failure on sysvinit
cover bind: fix daemon startup failure on sysvinit
The following changes since commit 72867393fe2004ab9f0ee23eb09a975c82938b9e:
runqemu: Also specialcase resolution of '.' to the file's location (2017-11-21 17:58:41 +0000)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib ChenQi/bind-daemon-sysvinit
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=ChenQi/bind-daemon-sysvinit
Chen Qi (1):
bind: fix daemon startup failure on sysvinit
...owner-of-rndc.key-to-correctly-start-daem.patch | 32 ++++++++++++++++++++++ meta/recipes-connectivity/bind/bind_9.10.6.bb | 1 + 2 files changed, 33 insertions(+) create mode 100644 meta/recipes-connectivity/bind/bind/0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch
Signature · 1 line
1.9.1
PATCH 1/1 bind: fix daemon startup failure on sysvinit
When starting the bind daemon on sysvinit based system, we are meeting the following error and the daemon fails to start.
/etc/bind/rndc.key: permission denied
Fix this problem by chaning the ownship of rndc.key to root:bind.
--- ...owner-of-rndc.key-to-correctly-start-daem.patch | 32 ++++++++++++++++++++++ meta/recipes-connectivity/bind/bind_9.10.6.bb | 1 + 2 files changed, 33 insertions(+) create mode 100644 meta/recipes-connectivity/bind/bind/0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch
meta/recipes-connectivity/bind/bind/0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch new file +32 -0
@@ -0,0 +1,32 @@ +Subject: init.d: fix owner of rndc.key to correctly start daemon + +When starting with '-u bind' option, which is a common practice for +most distros, we would meet the following error and the daemon would +not be started up correctly. + + /etc/bind/rndc.key: permission denied + +Fix this problem by changing the ownership of rndc.key to root:bind. + +Upstream-Status: Pending + +Signed-off-by: Chen Qi <[email protected]> +--- + init.d | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/init.d b/init.d +index b2eec60..d6860c7 100644 +--- a/init.d ++++ b/init.d +@@ -57,6 +57,7 @@ case "$1" in + modprobe capability >/dev/null 2>&1 || true + if [ ! -f /etc/bind/rndc.key ]; then + /usr/sbin/rndc-confgen -a -b 512 -r /dev/urandom ++ chown root:bind /etc/bind/rndc.key + chmod 0640 /etc/bind/rndc.key + fi + if [ -f /var/run/named/named.pid ]; then +-- +2.11.0 +
meta/recipes-connectivity/bind/bind_9.10.6.bb +1 -0
@@ -21,6 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://0001-gen.c-extend-DIRNAMESIZE-from-256-to-512.patch \ file://0001-lib-dns-gen.c-fix-too-long-error.patch \ file://use-python3-and-fix-install-lib-path.patch \ + file://0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch \ " SRC_URI[md5sum] = "84e663284b17aee0df1ce6f248b137d7"
Signature · 1 line
1.9.1
ping
Could someone help review this patch?
Best Regards,
Chen Qi
Quoted 64 lines · Chen Qi
When starting the bind daemon on sysvinit based system, we are meeting the following error and the daemon fails to start.
/etc/bind/rndc.key: permission deniedFix this problem by chaning the ownship of rndc.key to root:bind.
Signed-off-by Chen Qi <[email protected]>--- ...owner-of-rndc.key-to-correctly-start-daem.patch | 32 ++++++++++++++++++++++ meta/recipes-connectivity/bind/bind_9.10.6.bb | 1 + 2 files changed, 33 insertions(+)create mode 100644
meta/recipes-connectivity/bind/bind/0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patchmeta/recipes-connectivity/bind/bind/0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch new file +32
-0@@ -0,0 +1,32 @@ +Subject: init.d: fix owner of rndc.key to correctly start daemon + +When starting with '-u bind' option, which is a common practice for +most distros, we would meet the following error and the daemon would +not be started up correctly. + + /etc/bind/rndc.key: permission denied + +Fix this problem by changing the ownership of rndc.key to root:bind. + +Upstream-Status: Pending + +Signed-off-by: Chen Qi <[email protected]> +--- + init.d | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/init.d b/init.d +index b2eec60..d6860c7 100644 +--- a/init.d ++++ b/init.d +@@ -57,6 +57,7 @@ case "$1" in + modprobe capability >/dev/null 2>&1 || true + if [ ! -f /etc/bind/rndc.key ]; then + /usr/sbin/rndc-confgen -a -b 512 -r /dev/urandom ++ chown root:bind /etc/bind/rndc.key + chmod 0640 /etc/bind/rndc.key + fi + if [ -f /var/run/named/named.pid ]; then +-- +2.11.0 +meta/recipes-connectivity/bind/bind_9.10.6.bb +1
-0@@ -21,6 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://0001-gen.c-extend-DIRNAMESIZE-from-256-to-512.patch \ file://0001-lib-dns-gen.c-fix-too-long-error.patch \ file://use-python3-and-fix-install-lib-path.patch \ + file://0001-init.d-fix-owner-of-rndc.key-to-correctly-start-daem.patch \ " SRC_URI[md5sum] = "84e663284b17aee0df1ce6f248b137d7"