Subject: re: installing named-xfer static by default
To: None <itojun@iijlab.net>
From: matthew green <mrg@eterna.com.au>
List: tech-security
Date: 02/09/2001 12:49:19
   
   	you need at least /etc/named.conf, /etc/namedb, /dev/{null,zero}

i have never need /dev files for named -t.  what do you need these for?

   	(maybe random?) and named-xfer, a uid to run it.
   	then "named -t /var/namedjail -u foo".

you also don't want to lose syslog messages, so one needs to start syslog
with '-p /var/run/log -p /var/namedjail/var/run/log'.


also, `ndc' no longer works when you do this.  at one point, i fixed NetBSD's
named to create a symlink in /var/run/ndc to $chroot/var/run/ndc, and ndc
did work then, but that appears to have been lost in one of the upgrades.



.mrg.