Re: chroot bind?

2001-05-02 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:25:14PM -0400, Jaldhar H. Vyas wrote: Because it is a non-standard /var directory, I thought it would be helpful to name it after the package it belonged to. Just a follow up on this. Haven't spent much time on the actual package as its seems quite straight to do

Re: chroot bind?

2001-04-24 Thread Nicholas Lee
On Mon, Apr 23, 2001 at 07:32:44AM -0400, Jaldhar H. Vyas wrote: Well, yeah. The problem is we can't change files from other packages-especially if they are confffiles. However, is it all right to create script installed with the package which does the deed. Rather than forcing the admin

Re: chroot bind?

2001-04-23 Thread Nicholas Lee
Sorry missed your response, just picked it up now from the web archive. Are you working with bind 8.X or 9.X? Jaldhar H. Vyas mentioned he has something working with 8.2.3. I was only thinking myself with bind8. As Jaldhar also mentioned, bind9 isn't something I trust yet. Even in a chroot.

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
Note: I'm not subscribed to -devel at the moment, and probably not for a while since its unlikely I have time to read the volume. Please CC: Ethan Benson [EMAIL PROTECTED] mentioned: you have to have at least named-xfer. Of course, but. yes there is. Only named-xfer. the way i do

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 04:54:42PM -0800, Ethan Benson wrote: fine, no disagreement here, what im pointing out is that with at least bind 8 (someone mentioned bind 9 works differently) its not open to debate, you either have bind binaries in the chroot jail or bind doesn't work. No, only

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:43:52PM -0400, Jaldhar H. Vyas wrote: So change it to more-secure-bind then :-) Or /var/named, whatever is thought best. I guess we'' see what the FHS says. Tho I have no experience with how quick these guys are. Btw, Bdale (Debian Bind maintainer) suggested

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:25:14PM -0400, Jaldhar H. Vyas wrote: Because I was following the instructions at http://www.psionic.com/papers/dns/linux-dns which suggests named and named-xfer should go there. I decided to throw the rest in there too. :-) This is wrong. But if we don't need

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:36:23PM -0400, Jaldhar H. Vyas wrote: Ethan mentioned the method but it cannot be automated which is why I left it up to the admin. Maybe there should be a discussion as to the possibility of a mechanism to handle this. Nicholas

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 07:27:56PM -0800, Ethan Benson wrote: put into a chroot is named and named-xfer, apparently named is not actually necessary. Which was my point. Glad we got that settle. ;) /etc/init.d/sysklogd is a conffile, sysklogd cannot change it without the admin's

Debian bind chroot option?

2000-12-26 Thread Nicholas Lee
Are there any thoughts to a chroot install option for bind?? Its not that hard to setup, but I wonder how it would fit into the debian policy. Nicholas