[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Exim and right permissions for execution of a perl script



> BTW, the scripts are supposed to do basic DNS stuff... and the e-mail is
> an encrypted set of commands created by an on line form on a web server.
> My question now is, is making the named.conf file as well as my namedb
> directory writable by the group (or user) exim the best way of doing
> this... or should I run the scripts suid named (in which case I should
> use /usr/bin/suidperl and it should be suid root?- or named??)??
 
Something funky would be to pipe the message to a perl script which will put the data into a MySQL/Postgres DB.

You then run a perl script from cron every few minutes to generate a named.conf.new file, do a diff between named.conf and named.conf.new, if a diff, copy named.conf.new over the existing named.conf and reload your name server.

The Mysql/Postgres DB would be simple, just a field for domain, allowed_xfer_hosts, owner_email, type (master/slave), and ns_to_load_zone_from (if slave domain).

Look at the CPAN libraries for Perl to talk to MySQL (seach.cpan.org) if you're interested in going this way .. or drop me a line if you get stuck.

my 2c :)

-- 
bje at serendipity.org.za
the faculty of making fortunate discoveries


-----
This is the afnog mailing list, managed by Majordomo 1.94.5

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org