Re: chroot bind?

2001-05-01 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:25:14PM -0400, Jaldhar H. Vyas wrote: > > Because it is a non-standard /var directory, I thought it would be helpful > to name it after the package it belonged to. Just a follow up on this. Haven't spent much time on the actual package as its seems quite straight to d

Re: chroot bind?

2001-04-24 Thread Nicholas Lee
On Mon, Apr 23, 2001 at 07:32:44AM -0400, Jaldhar H. Vyas wrote: > > Well, yeah. The problem is we can't change files from other > packages-especially if they are confffiles. However, is it all right to create script installed with the package which does the deed. Rather than forcing the admin

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
Sorry missed your response, just picked it up now from the web archive. > Are you working with bind 8.X or 9.X? Jaldhar H. Vyas mentioned he has something working with 8.2.3. I was only thinking myself with bind8. As Jaldhar also mentioned, bind9 isn't something I trust yet. Even in a chroot.

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 07:27:56PM -0800, Ethan Benson wrote: > put into a chroot is named and named-xfer, apparently named is not > actually necessary. Which was my point. Glad we got that settle. ;) > /etc/init.d/sysklogd is a conffile, sysklogd cannot change it without > the admin's perm

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:36:23PM -0400, Jaldhar H. Vyas wrote: > > Ethan mentioned the method but it cannot be automated which is why I left > it up to the admin. Maybe there should be a discussion as to the possibility of a mechanism to handle this. Nicholas

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:25:14PM -0400, Jaldhar H. Vyas wrote: > Because I was following the instructions at > http://www.psionic.com/papers/dns/linux-dns which suggests named and > named-xfer should go there. I decided to throw the rest in there too. :-) This is wrong. > > But if we don't ne

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 09:43:52PM -0400, Jaldhar H. Vyas wrote: > > So change it to more-secure-bind then :-) Or /var/named, whatever is > thought best. I guess we'' see what the FHS says. Tho I have no experience with how quick these guys are. > Btw, Bdale (Debian Bind maintainer) suggest

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
On Sun, Apr 22, 2001 at 04:54:42PM -0800, Ethan Benson wrote: > > fine, no disagreement here, what im pointing out is that with at least > bind 8 (someone mentioned bind 9 works differently) its not open to > debate, you either have bind binaries in the chroot jail or bind > doesn't work. No, o

Re: chroot bind?

2001-04-22 Thread Nicholas Lee
Note: I'm not subscribed to -devel at the moment, and probably not for a while since its unlikely I have time to read the volume. Please CC: Ethan Benson <[EMAIL PROTECTED]> mentioned: > you have to have at least named-xfer. Of course, but. > yes there is. Only named-xfer. > the way

Debian bind chroot option?

2000-12-26 Thread Nicholas Lee
Are there any thoughts to a chroot install option for bind?? Its not that hard to setup, but I wonder how it would fit into the debian policy. Nicholas