Support / Security / Advisories / Mandrakelinux 9.2 / MDKSA-2002:001

Package name: bind
Date: 2002-01-08
Advisory ID: MDKSA-2002:001
Affected versions: 8.1 i586 , 8.0 i586 , 8.1 i586 , 8.0 i586

Problem description

There are some insecure permissions on configuration files and executables with the bind 9.x packages shipped with Mandrake Linux 8.0 and 8.1. This update provides stricter permissions by making the /etc/rndc.conf and /etc/rndc.key files read/write by the named user and by making /sbin/rndc-confgen and /sbin/rndc read/write/executable only by root.

Updated packages

8.1 i586

 a4eef4e0fce2bdd649ae6612356726cf  8.1/RPMS/bind-9.2.0-0.rc3.2mdk.i586.rpm
686b991d8419f092a28d550cebb3f232  8.1/RPMS/bind-devel-9.2.0-0.rc3.2mdk.i586.rpm
d4c542fd7f269941e76e650f1db3700f  8.1/RPMS/bind-utils-9.2.0-0.rc3.2mdk.i586.rpm
34d4ac467dd564c0d6684b0da9d5fb59  8.1/SRPMS/bind-9.2.0-0.rc3.2mdk.src.rpm

8.0 i586

 a086335b56151269c252428df794e154  8.0/RPMS/bind-9.1.1-1.1mdk.i586.rpm
080d61511f43ecbfc07809221e0e70b7  8.0/RPMS/bind-devel-9.1.1-1.1mdk.i586.rpm
05ba599912dd98bdc328c715c4ebdf81  8.0/RPMS/bind-utils-9.1.1-1.1mdk.i586.rpm
60e59fff8813f9deed9d5609f13a3717  8.0/SRPMS/bind-9.1.1-1.1mdk.src.rpm

8.1 i586

 9ee1dc19901e19f6f514faef21ce0c34  ia64/8.1/RPMS/bind-9.2.0-0.rc3.2mdk.ia64.rpm
a01256b2b4100c837285641f8c25d5b6  ia64/8.1/RPMS/bind-devel-9.2.0-0.rc3.2mdk.ia64.rpm
34ce63ee81f72f643960e8aadd95dfad  ia64/8.1/RPMS/bind-utils-9.2.0-0.rc3.2mdk.ia64.rpm
34d4ac467dd564c0d6684b0da9d5fb59  ia64/8.1/SRPMS/bind-9.2.0-0.rc3.2mdk.src.rpm

8.0 i586

 a47de0d17b2dcd23ce62eae65dd89807  ppc/8.0/RPMS/bind-9.1.1-1.1mdk.ppc.rpm
222df499cf38cb841775ea6747137c0f  ppc/8.0/RPMS/bind-devel-9.1.1-1.1mdk.ppc.rpm
ce6ccf198b23d29f9f37fecf1db255d2  ppc/8.0/RPMS/bind-utils-9.1.1-1.1mdk.ppc.rpm
60e59fff8813f9deed9d5609f13a3717  ppc/8.0/SRPMS/bind-9.1.1-1.1mdk.src.rpm