Access lists are defined by a name in the name daemon configuration file. An access list is basically a set of IP hosts or network addresses assigned to a zone in the zone section. An access list can be constructed from the names of other access lists defined in the configuration file. The predefined access lists in BIND 8 are None, Any, Localhost and Localnets. We can put the access lists in the global options section, and it will be applied to all zones specified in the configuration file.
Daemons often run with root permissions.
With BIND 8, named can run as a different user. It is a good idea not to run named with root permissions, for security reasons. If someone exploits the name daemon and tells it to run arbitrary code, then this arbitrary code should not be run with root permissions. The best thing to do is create an account and a group for the name daemon. We must first create this user and group.