[Bug 245488] Review Request: maradns - security-aware DNS server

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: maradns - security-aware DNS server


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245488





------- Additional Comments From ruben at rubenkerkhof.com  2007-06-29 14:10 EST -------
rpmlint of maradns:
E: maradns incoherent-subsys /etc/rc.d/init.d/maradns-zoneserver zoneserver
E: maradns incoherent-subsys /etc/rc.d/init.d/maradns-zoneserver zoneserver
E: maradns incoherent-subsys /etc/rc.d/init.d/maradns-zoneserver zoneserver

This one is simple to solve, use /var/lock/subsys/maradns-zoneserver instead of zoneserver in the init 
file.

Patch0:         initscripts.patch can now be removed

# copy symlinked docs to the real thing
%{__rm} FAQ CHANGELOG CREDITS
%{__cp} doc/en/faq.txt FAQ
%{__cp} doc/en/changelog.txt CHANGELOG
%{__cp} doc/en/credits.txt CREDITS

Why not use a symlink? Shipping the same document twice seems like a waste of diskspace.

The condrestart in %postun should only happen on upgrades, not on installs or uninstalls.

By default, maradns runs as root, while it has the option to run as normal user in a chroot.
I think it would be nice if you could :
 - add a user and group
 - add that user to /etc/mararc

Have a look at Pound or pdns for examples
There's also a draft at http://fedoraproject.org/wiki/PackagingDrafts/UsersAndGroups you can look at.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.