ports/dns/powerdns-recursor/files/extrapatch-setuid
Jason Unovitch 9f5626e987 dns/powerdns-recursor: update 4.0.3 -> 4.0.4
Changes:	https://doc.powerdns.com/md/changelog/#powerdns-recursor-404

PR:		216135
Reported by:	Dani <i.dani@outlook.com>
Submitted by:	ghostonthewire@gmail.com
Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
Security:	CVE-2016-7068
Security:	CVE-2016-7073
Security:	CVE-2016-7074
Security:	https://vuxml.FreeBSD.org/freebsd/e3200958-dd6c-11e6-ae1b-002590263bf5.html
MFH:		2017Q1
2017-01-18 11:24:40 +00:00

13 lines
1.1 KiB
Text

--- pdns_recursor.cc.orig 2017-01-17 02:48:30 UTC
+++ pdns_recursor.cc
@@ -2969,8 +2969,8 @@ int main(int argc, char **argv)
::arg().set("disable-syslog","Disable logging to syslog, useful when running inside a supervisor that logs stdout")="no";
::arg().set("log-common-errors","If we should log rather common errors")="no";
::arg().set("chroot","switch to chroot jail")="";
- ::arg().set("setgid","If set, change group id to this gid for more security")="";
- ::arg().set("setuid","If set, change user id to this uid for more security")="";
+ ::arg().set("setgid","If set, change group id to this gid for more security")="pdns";
+ ::arg().set("setuid","If set, change user id to this uid for more security")="pdns_recursor";
::arg().set("network-timeout", "Wait this nummer of milliseconds for network i/o")="1500";
::arg().set("threads", "Launch this number of threads")="2";
::arg().set("processes", "Launch this number of processes (EXPERIMENTAL, DO NOT CHANGE)")="1"; // if we un-experimental this, need to fix openssl rand seeding for multiple PIDs!