Re: chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-27 Thread Kevin Oberman
> Date: Mon, 27 Sep 2010 09:46:44 -0500 > From: Jerry Kemp > Sender: bind-users-bounces+oberman=es@lists.isc.org > > IMHO, the primary benefit of chrooting is security. > > another, less painful option, again IMHO, is to run BIND in a jail if > you are using BSD, or a zone if you are on Sola

Re: chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-27 Thread Doug Barton
On 9/27/2010 7:46 AM, Jerry Kemp wrote: IMHO, the primary benefit of chrooting is security. another, less painful option, again IMHO, is to run BIND in a jail if you are using BSD, The default configuration in FreeBSD is to run it chroot'ed. Given that it's very unlikely that the chroot will

Re: chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-27 Thread Jerry Kemp
IMHO, the primary benefit of chrooting is security. another, less painful option, again IMHO, is to run BIND in a jail if you are using BSD, or a zone if you are on Solaris, or a Solaris based distro. Jerry On 09/24/10 16:46, Scott Haneda wrote: > On Sep 24, 2010, at 12:51 PM, Tony Finch wrote

chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-24 Thread Scott Haneda
On Sep 24, 2010, at 12:51 PM, Tony Finch wrote: > A default build of bind expects to find it in /etc/named.conf > If you are running chrooted it needs to be copied into the chroot. Most systems these days have packages of BIND. Those that do tend to have BIND-chroot as an option for install.