On Jan 22, Marek Habersack <grendel@vip.net.pl> wrote: >> That is the best way to go, needs a bind patch though! >Not quite that easy as of now because there's a scarce file-system support >for capabilities in the kernel. Right now you'd have to write a bind >bootstrap program that'd set the required capabilities or modify bind itself >(not a trivial task....) Or use my patched start-stop-daemon... http://www.linux.it/~md/software/ssd.tgz -- ciao, Marco