bind: fix startup failure in sysvinit
cover bind: fix startup failure in sysvinit
*** BLURB HERE ***
The following changes since commit b02f3bfe2fee291a9db85094e5f31b1933acf871:
local.conf.sample.extended: add another warning to comment about GLIBC_GENERATE_LOCALES (2018-10-14 23:45:40 +0100)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib ChenQi/bind-sysvinit
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=ChenQi/bind-sysvinit
Chen Qi (1):
bind: fix startup failure in sysvinit
.../0001-avoid-start-failure-with-bind-user.patch | 27 ++++++++++++++++++++++ meta/recipes-connectivity/bind/bind_9.11.4.bb | 1 + 2 files changed, 28 insertions(+) create mode 100644 meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch
Signature · 1 line
1.9.1
PATCH 1/1 bind: fix startup failure in sysvinit
The generated key file should try to have bind group so that if the named daemon is started via '-u bind' option, which is the default in OE core, we will not get startup failure because of 'permission denied' error.
Signed-off-by Chen Qi <[email protected]>
--- .../0001-avoid-start-failure-with-bind-user.patch | 27 ++++++++++++++++++++++ meta/recipes-connectivity/bind/bind_9.11.4.bb | 1 + 2 files changed, 28 insertions(+) create mode 100644 meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch
meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch new file +27 -0
@@ -0,0 +1,27 @@ +From 31dde3562f287429eea94b77250d184818b49063 Mon Sep 17 00:00:00 2001 +From: Chen Qi <[email protected]> +Date: Mon, 15 Oct 2018 16:55:09 +0800 +Subject: [PATCH] avoid start failure with bind user + +Upstream-Status: Pending + +Signed-off-by: Chen Qi <[email protected]> +--- + init.d | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/init.d b/init.d +index b2eec60..6e03936 100644 +--- a/init.d ++++ b/init.d +@@ -57,6 +57,7 @@ case "$1" in + modprobe capability >/dev/null 2>&1 || true + if [ ! -f /etc/bind/rndc.key ]; then + /usr/sbin/rndc-confgen -a -b 512 -r /dev/urandom ++ chown root:bind /etc/bind/rndc.key >/dev/null 2>&1 || true + chmod 0640 /etc/bind/rndc.key + fi + if [ -f /var/run/named/named.pid ]; then +-- +2.7.4 +
meta/recipes-connectivity/bind/bind_9.11.4.bb +1 -0
@@ -19,6 +19,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.gz \ file://0001-lib-dns-gen.c-fix-too-long-error.patch \ file://0001-configure.in-remove-useless-L-use_openssl-lib.patch \ file://0001-named-lwresd-V-and-start-log-hide-build-options.patch \ + file://0001-avoid-start-failure-with-bind-user.patch \ file://CVE-2018-5740.patch \ "
Signature · 1 line
1.9.1