Public bug reported:
Binary package hint: bind9
Bind doesn't have the best track record for security and doesn't really
access anything outside of itself. Is there any chance for getting it
to install into a chroot environment?
Steps to make this possible:
vi /etc/default/bind9 and change OPTIONS to
OPTIONS="-u bind -t /var/spool/bind9"
mkdir -p /var/spool/bind9/etc
mkdir /var/spool/bind9/dev
mkdir -p /var/spool/bind9/var/cache/bind
mkdir -p /var/spool/bind9/var/run/bind/run
mv /etc/bind /var/spool/bind9/etc
ln -s /var/spool/bind9/etc/bind /etc/bind
mknod /var/spool/bind9/dev/null c 1 3
mknod /var/spool/bind9/dev/random c 1 8
chmod 666 /var/spool/bind9/dev/null /var/spool/bind9/dev/random
chown -R bind:bind /var/spool/bind9/var/*
chown -R bind:bind /var/spool/bind9/etc/bind
You also need to make a small change to syslog (this is the tricky bit for
automating....)
vi /etc/init.d/sysklogd and change SYSLOGD to
SYSLOGD="-u syslog -a /var/lib/named/dev/log"
** Affects: bind9 (Ubuntu)
Importance: Undecided
Status: New
--
Installing bind9 in a chroot
https://bugs.launchpad.net/bugs/127184
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
