[Unbound-users] unbound-control access control
wouter at NLnetLabs.nl
Fri Nov 21 18:44:04 UTC 2008
-----BEGIN PGP SIGNED MESSAGE-----
Dmitriy Demidov wrote:
> control unbound process to any user in the local system... AFAIK all access
> control is done by file systems ACL for SSL sertificate files?
Yes. Also the interface is 127.0.0.1 by default, so localhost only.
The system can work for remote administration also, but then you must
set control-interface "0.0.0.0" (any). and maybe adjust your firewall.
> and to close this "security hole" I make a fast chmod/chown to this:
added chmod o-rw (files) to unbound-control-setup.
Thank you for the suggestion,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Unbound-users