Subject: Re: should bind9 have a chroot option?
To: None <tls@rek.tjls.com>
From: Steven M. Bellovin <smb@research.att.com>
List: netbsd-users
Date: 04/07/2003 22:02:29
In message <20030408015503.GA4457@rek.tjls.com>, Thor Lancelot Simon writes:
>On Mon, Apr 07, 2003 at 11:24:08PM +0100, Charles Blundell wrote:
>> on Mon, Apr 07, 2003 at 06:03:19PM -0400, Steve Bellovin wrote:
>> > named has a chroot option. However, the bind9 package does
>> > not. I would think that it should.
>>
>> If you mean the rc.d script, I had this lying around, based on
>> /etc/rc.d/named.
>
>The only problem is that the bind9 named can't chgrp like our named
>can, seemingly because they'd already used up the option letter we
>added for it! A trivial annoyance, but one that we should address.
>
>Thor
>
I'd think that that is the sort of change they'd be likely to buy back.
--Steve Bellovin, http://www.research.att.com/~smb (me)
http://www.wilyhacker.com (2nd edition of "Firewalls" book)