bind running as root in Mandrake 7.0

[nico () MONNET TO (Nicolas MONNET)]

bind is run as user / group 'root' in Mandrake 7.0, and probably in
Redhat6.x as well. This is a surprising (if not stupid) setting given the
fact that sploits exist that easily break out of any chroot jail in such a
case; and that switching users is as easy as adding an option to
named. Esp. given the infuriatingly poor security track record of named
...

Indeed, here's a simple patch against /etc/rc.d/init.d/named that I
strongly suggest applying. It does'nt seem to cause any problem for me.

*** named.orig  Sat Jun  3 15:55:00 2000
--- named       Fri Jun  2 22:04:10 2000
***************
*** 28,34 ****
    start)
          # Start daemons.
          echo -n "Starting named: "
!         daemon named
          RETVAL=$?
           [ $RETVAL -eq 0 ] && touch /var/lock/subsys/named
          echo
--- 28,34 ----
    start)
          # Start daemons.
          echo -n "Starting named: "
!         daemon named -u nobody -g nogroup
          RETVAL=$?
           [ $RETVAL -eq 0 ] && touch /var/lock/subsys/named
          echo