<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 10/01/2020 11:07, Sharone wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CACMzb4fiMihNtCgUy3R2Hnd6zfyJD2JjoER=xM-Dkn_c27Jg-w@mail.gmail.com">I
have attempted to comment out the line <i>extend pdns-rec
/usr/local/bin/pdns_stats </i>in snmpd.conf file and still
gotten the same error, however changing permissions to the entire
directory to rwx worked but like you mentioned this indeed brings
about a security issue. </blockquote>
<p>Oh well, if that works, you just do tighter permissions - e.g.
changing the directory *group* to "snmp" or "Debian-snmp" as
appropriate, and setting mode 775.</p>
<p>This is what out-of-box recursor has:</p>
<p>root@cache1:~# ls -ld /var/run/pdns-recursor<br>
drwxr-xr-x 2 pdns pdns 60 Dec 12 12:49 /var/run/pdns-recursor</p>
<p>root@cache1:~# ls -l /var/run/pdns-recursor/<br>
total 0<br>
srwxr-xr-x 1 pdns pdns 0 Dec 12 12:49 pdns_recursor.controlsocket</p>
<p>Using pdns:snmp and mode 775 should be fine.<br>
</p>
<p>See also the perms for the socket itself: <a
href="https://docs.powerdns.com/recursor/settings.html#socket-owner-socket-group-socket-mode">https://docs.powerdns.com/recursor/settings.html#socket-owner-socket-group-socket-mode</a></p>
<p>HTH,</p>
<p>Brian.<br>
</p>
</body>
</html>