Re: chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-27 Thread Doug Barton
On 9/27/2010 7:46 AM, Jerry Kemp wrote: IMHO, the primary benefit of chrooting is security. another, less painful option, again IMHO, is to run BIND in a jail if you are using BSD, The default configuration in FreeBSD is to run it chroot'ed. Given that it's very unlikely that the chroot will

Re: chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-27 Thread Kevin Oberman
Date: Mon, 27 Sep 2010 09:46:44 -0500 From: Jerry Kemp dns.bind.l...@oryx.cc Sender: bind-users-bounces+oberman=es@lists.isc.org IMHO, the primary benefit of chrooting is security. another, less painful option, again IMHO, is to run BIND in a jail if you are using BSD, or a zone if