Bug 24364

Summary: wrong description or rc.conf
Product: Documentation Reporter: toor <toor>
Component: Books & ArticlesAssignee: freebsd-doc (Nobody) <doc>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   

Description toor 2001-01-16 00:30:01 UTC 
http://www.freebsd.org/handbook/securing-freebsd.html:

"FreeBSD now defaults to running ntalkd, comsat, and finger in a sandbox. Another program which may be a
candidate for running in a sandbox is named(8). The default rc.conf includes the arguments necessary to run
named in a sandbox in a commented-out form. Depending on whether you are installing a new system or upgrading"

No it doesn't. O'Reilly's does, though.

Fix: 

either amend rc.conf or the docs

Mind you, it could be I'm missing something. But if that's the case, blame
the docs ;).
How-To-Repeat: 
check rc.conf
Comment 1 dima 2001-01-16 04:48:52 UTC 
> 
> >Number:         24364
> >Category:       docs
> >Synopsis:       wrong description or rc.conf
> 
> "FreeBSD now defaults to running ntalkd, comsat, and finger in a sandbox. Ano
> ther program which may be a
> candidate for running in a sandbox is named(8). The default rc.conf includes 
> the arguments necessary to run
> named in a sandbox in a commented-out form. Depending on whether you are inst
> alling a new system or upgrading"
> 
> No it doesn't. O'Reilly's does, though.

It does, but it isn't very clear about it:

<quote rc.conf>
#
# named.  It may be possible to run named in a sandbox, man security for
# details.
#
named_enable="NO"               # Run named, the DNS server (or NO).
named_program="named"           # path to named, if you want a different one.
named_flags=""                  # Flags for named
#named_flags="-u bind -g bind"  # Flags for named
<unquote>

The last line is an example of how to run it in a sandbox.

					Dima Dorfman
					dima@unixfreak.org
Comment 2 Chris D.Faulhaber freebsd_committer freebsd_triage 2001-01-16 13:30:13 UTC 
State Changed
From-To: open->closed

Handbook updated to refer to /etc/defaults/rc.conf