Add ewarn about wrong permissions when upgrading from bind 9.4.x. Comment view chaos.

(Portage version: 2.2_rc67/cvs/Linux x86_64)

5 files changed, 42 insertions, 5 deletions

diff --git a/net-dns/bind/ChangeLog b/net-dns/bind/ChangeLog
index 3ebd3bbba888..84e398c0a542 100644
--- a/net-dns/bind/ChangeLog
+++ b/net-dns/bind/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for net-dns/bind
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/ChangeLog,v 1.285 2010/07/20 16:59:06 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/ChangeLog,v 1.286 2010/07/25 18:57:41 idl0r Exp $
+
+  25 Jul 2010; Christian Ruppert <idl0r@gentoo.org> bind-9.6.2_p2.ebuild,
+  bind-9.7.0_p2-r1.ebuild, bind-9.7.1_p2.ebuild, files/named.conf-r4:
+  Add ewarn about wrong permissions when upgrading from bind 9.4.x. Comment
+  view chaos.
 
   20 Jul 2010; Christian Ruppert <idl0r@gentoo.org> files/named.confd-r3:
   Fix a typo in conf.d/named, bug 329111.
diff --git a/net-dns/bind/bind-9.6.2_p2.ebuild b/net-dns/bind/bind-9.6.2_p2.ebuild
index 3d4c4e44fd39..2e110bd28ad7 100644
--- a/net-dns/bind/bind-9.6.2_p2.ebuild
+++ b/net-dns/bind/bind-9.6.2_p2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.6.2_p2.ebuild,v 1.8 2010/06/29 16:02:32 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.6.2_p2.ebuild,v 1.9 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -275,6 +275,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/bind-9.7.0_p2-r1.ebuild b/net-dns/bind/bind-9.7.0_p2-r1.ebuild
index f517aa754d63..ac2ba61613ae 100644
--- a/net-dns/bind/bind-9.7.0_p2-r1.ebuild
+++ b/net-dns/bind/bind-9.7.0_p2-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.0_p2-r1.ebuild,v 1.8 2010/06/29 16:02:32 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.0_p2-r1.ebuild,v 1.9 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -275,6 +275,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/bind-9.7.1_p2.ebuild b/net-dns/bind/bind-9.7.1_p2.ebuild
index b15fcfe0e74f..f87c423023ab 100644
--- a/net-dns/bind/bind-9.7.1_p2.ebuild
+++ b/net-dns/bind/bind-9.7.1_p2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.1_p2.ebuild,v 1.1 2010/07/15 20:27:20 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.1_p2.ebuild,v 1.2 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -276,6 +276,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/files/named.conf-r4 b/net-dns/bind/files/named.conf-r4
index c82d13b06ced..d302794bc16c 100644
--- a/net-dns/bind/files/named.conf-r4
+++ b/net-dns/bind/files/named.conf-r4
@@ -33,7 +33,7 @@ options {
 	/* https://www.isc.org/solutions/dlv >=bind-9.7.x only */
 	//bindkeys-file "/etc/bind/bind.keys";
 
-	listen-on-v6 { none; };
+	listen-on-v6 { ::1; };
 	listen-on { 127.0.0.1; };
 
 	allow-query {
@@ -203,6 +203,7 @@ view "public" in {
 };
 
 /* Hide the bind version */
+/*
 view "chaos" chaos {
 	match-clients { any; };
 	allow-query { none; };
@@ -211,3 +212,4 @@ view "chaos" chaos {
 		file "/dev/null";  // or any empty file
 	};
 };
+*/