sandboxing named...

[Chuck Swiger]

I believe the normal way to chroot named in FreeBSD is something like:

named_enable="YES"
named_flags="-u bind -g bind -t /etc/namedb -c named.conf"

...in /etc/rc.conf. When doing so, the following seems to make life much better for ndc and the config file:

mkdir /etc/namedb/etc
mkdir /etc/namedb/var
mkdir /etc/namedb/var/run
ln -s / /etc/namedb/etc/namedb
ln -s /etc/namedb/var/run/ndc /var/run/ndc

-Chuck

PS: I'm not exactly sure whether this is a suggestion, a question to verify that I'm not doing something silly, or some combination. :-)


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message