-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > This is surely a packing error since the bind-chroot package should
> > install the proper chrooted directory structure and install the
> correct
> > basic files in them including a basic named.conf under
> > /var/named/chroot/etc/
> > There appears not even to be a root cert file in the chroot.

> Well, IMHO, the packaging error is that we have bind-chroot at all.
> Time
> to ask its maintainer whether it shouldn't be choked after all these
> years it was not needed.

There are a LOT of production dns servers running bind in a chroot jail
via the bind-chroot package. Of course the selinux lockdown might have
much the same effect - I have not looked at that in detail.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFKPVBfL6j7milTFsERAovAAJ0a+05cOCOKSYGbViEx0IsTaZM3cACfbAFd
gglfGKmXmmVJHgMdAn7fhCo=
=+jdR
-----END PGP SIGNATURE-----


-- 
fedora-devel-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-devel-list

Reply via email to