[cobalt-security] running named -u named

[cpaul <inc@xxxxxxxxxxxxx>]

i changed my init.d/named script so that it runs named as

  named -u named -g named


but it has permission problems:

Jun 15 12:13:48 www named[2884]: unix control "/var/run/ndc" unlink failed: Permission denied
Jun 15 12:13:48 www named[2884]: ctl_server: bind: /var/run/ndc: Address already in use
Jun 15 12:13:48 www named[2884]: couldn't create pid file '/var/run/named.pid'
Jun 15 12:13:48 www named[2884]: bind(dfd=20, [127.0.0.1].53): Permission denied
Jun 15 12:13:48 www named[2884]: deleting interface [127.0.0.1].53
Jun 15 12:13:48 www named[2884]: bind(dfd=20, [209.217.53.54].53): Permission denied
Jun 15 12:13:48 www named[2884]: deleting interface [209.217.53.54].53
Jun 15 12:13:48 www named[2884]: bind(dfd=20, [209.217.53.55].53): Permission denied
Jun 15 12:13:48 www named[2884]: deleting interface [209.217.53.55].53
Jun 15 12:13:48 www named[2884]: bind(dfd=20, [209.217.53.56].53): Permission denied
Jun 15 12:13:48 www named[2884]: deleting interface [209.217.53.56].53
Jun 15 12:13:48 www named[2884]: not listening on any interfaces
Jun 15 12:13:48 www named[2884]: Forwarding source address is [0.0.0.0].1673
Jun 15 12:13:48 www named[2885]: couldn't create pid file '/var/run/named.pid'


i can't really make /var/run/ writable by public?

or do i make a directory /var/run/named/ and chown it named?  


thanks