Package: bind9utils
Version: 1:9.9.5.dfsg-9
Severity: important

Dear Maintainer,

dnssec-keygen creates *.private files with mode 0600, but /etc/bind belongs to 
root and is
only setguid bind. This means that by default bind9 (running as bind) cannot 
read them.
Manual intervention is required to chmod the resulting files to 0640.

Andrew Gallagher.

-- System Information:
Debian Release: 8.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.0.4-x86-linode75 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages bind9utils depends on:
ii  libbind9-90                            1:9.9.5.dfsg-9
ii  libc6                                  2.19-18
ii  libcap2                                1:2.24-8
ii  libcomerr2                             1.42.12-1.1
ii  libdns100                              1:9.9.5.dfsg-9
ii  libgssapi-krb5-2                       1.12.1+dfsg-19
ii  libisc95                               1:9.9.5.dfsg-9
ii  libisccc90                             1:9.9.5.dfsg-9
ii  libisccfg90                            1:9.9.5.dfsg-9
ii  libk5crypto3                           1.12.1+dfsg-19
ii  libkrb5-3                              1.12.1+dfsg-19
ii  libpython2.7-stdlib [python-argparse]  2.7.9-2
ii  libssl1.0.0                            1.0.1k-3
ii  libxml2                                2.9.1+dfsg1-5
ii  python                                 2.7.9-1

bind9utils recommends no packages.

bind9utils suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to