[Opendnssec-user] bad perms

[Randy Bush]

> freebsd 13.1 fully up to date
> opendnssec version 2.1.13
> bind  "9.16.42"
> 
>     rip.psg.com:/usr/home/dns# dig @localhost psg.com. a 
> 
>     ; <<>> DiG 9.18.16 <<>> @localhost psg.com. a
>     ; (2 servers found)
>     ;; global options: +cmd
>     ;; Got answer:
>     ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1669
>     ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> 
>     ;; OPT PSEUDOSECTION:
>     ; EDNS: version: 0, flags:; udp: 1232
>     ; COOKIE: 08a164ab319991760100000064a9cb3269d768b7b43df337 (good)
>     ;; QUESTION SECTION:
>     ;psg.com.                       IN      A
> 
>     ;; Query time: 0 msec
>     ;; SERVER: ::1#53(localhost) (UDP)
>     ;; WHEN: Sat Jul 08 20:46:42 UTC 2023
>     ;; MSG SIZE  rcvd: 64
> 
> all signed zones have undestirable perms
> 
>     -rw-r--r--  1 bind        staff          865 Jul  3  2011 com.luluvertus
>     -rw-r--r--  1 bind        staff         1056 Feb  7  2018 com.pathguy
>     -rw-r--r--  1 bind        staff         1055 Jan 30  2018 com.pathguy~
>     -rw-------  1 opendnssec  opendnssec   64392 Jul  8 20:16 com.psg
>     -rw-r--r--  1 bind        staff          827 Feb 11  2013 com.ruedesvertus
>     -rw-r--r--  1 bind        staff          801 Jan  5  2013 com.salmabezzir
>     -rw-------  1 opendnssec  opendnssec    7013 Jul  8 20:16 com.ymbk
>     -rw-r--r--  1 opendnssec  opendnssec  409523 Jul  8 20:51 gn

does not reproduce.  dunno why or why not.

randy