Bind9 runit script does not modprobe capability

[anonymous]

Hi,

On Debian sarge:

Bind9 requires the kernel capability module in order to drop all its root privileges except the ability to bind to a privileged port.

The /etc/runit/bind9/run should be changed to something like:

#!/bin/sh
modprobe capability >/dev/null 2>&1 || true
exec 2>&1
exec /usr/sbin/named -u bind -g

This ensures that mod capability is installed before bind starts. Else you get bind complaining about not being able to bind to port 53 the whole time.

Thanks

[anonymous]

This works great for bind 9.4.2-P1 and Kernel 2.6.21.5

[juruen@…]

(In [11133]) Load module capability in pre-start just like the bind9 init script does closes #550